Detailed Permissions Matrix for Cloud DNS

The Cloud DNS permissions matrix displays specific permissions for the following role-based access control (RBAC) roles:

Admin provides full access to create, read, update, and delete.
Creator provides access to create, read, and update.
Observer provides read-only access.

The matrix displays the Cloud DNS methods, their corresponding RESTful API commands, and the RBAC roles that are supported.

Limits

Method	API action	Role	Description
List limits	`GET /limits`	Admin, Creator, Observer	Lists all applicable limits.
List limit types	`GET /limits/types`	Admin, Creator, Observer	Lists the types of limits.
Show limits	`GET /limits/{type}`	Admin Creator Observer	Lists assigned limits of the specified type, such as `domain_limit`, `rate_limit`, and `domain_record_limit`.

Domains

Method	API action	Role	Description
List domains	`GET /domains`	Admin, Creator, Observer	Lists all account domains.
List domains by name	`GET /domains?name={domainName}`	Admin, Creator, Observer	Lists all domains manageable by the account that exactly match the value of the `name` parameter.
List domain details without subdomains	`GET /domains/{domainId}`	Admin, Creator	Lists details for a specific domain. By default, this operation displays information for records but not subdomains.
Show domain changes	`GET /domains/{domainId}/changes?since=[date/time]`	Admin, Creator, Observer	Shows all changes to the specified domain since the specified date or time.
Export domain	`GET /domains/{domainId}/export`	Admin, Creator, Observer	Exports details of the specified domain.
Search domains	`GET /domains/search?name={domainName}`	Admin, Creator, Observer	Lists all names manageable by the account that have the value of the `name` parameter as part of their name.
Create domain	`POST /domains`	Admin, Creator	Creates a new domain.
Clone domain	`POST /domains/{domainId}/clone?cloneName={newDomainName}`	Admin, Creator	Creates a new domain by cloning the specified domain.
Import domain	`POST /domains/import`	Admin, Creator	Imports a new domain with the configuration specified by the request.
Update domain	`PUT /domains/{domainId}`	Admin, Creator	Modifies the configuration of a domain.
Update domains	`PUT /domains`	Admin, Creator	Modifies multiple domains.
Delete domain	`DELETE /domains/{domainId}`	Admin	Removes a domain.
Delete domain and its subdomains	`DELETE /domains/{domainId}?deleteSubdomains=true`	Admin	Removes a domain and all of its subdomains.
Delete domains	`DELETE /domains?id={domainId1}&id={domainId2}`	Admin	Removes multiple domains.
Delete domains and subdomains	`DELETE /domains?id={domainId1}&id={domainId2}&deleteSubdomains=true`	Admin	Removes multiple domains and their subdomains.

Subdomains

Method	API action	Role	Description
List subdomains	`GET /domains/{domainId}/subdomains`	Admin, Creator, Observer	Lists domains that are subdomains of the specified domain.

Records

Method	API action	Role	Description
List records	`GET /domains/{domainId}/records`	Admin, Creator, Observer	Lists all records configured for the domain.
Search records	`GET /domains/{domainId}/records?type={recordType}&name={recordName}&data={recordData}`	Admin, Creator, Observer	Lists all records for the specified domain of the specified type that match the specified name or data.
Show record details	`GET /domains/{domainId}/records/{recordId}`	Admin, Creator, Observer	Lists details for a specific record.
Add records	`POST /domains/{domainId}/records`	Admin, Creator	Adds one or more new records to the domain.
Update record	`PUT /domains/{domainId}/records/{recordId}`	Admin, Creator	Modifies the configuration of a record in the domain.
Update records	`PUT /domains/{domainId}/records`	Admin, Creator	Modifies the configuration of records in the domain.
Delete record	`DELETE /domains/{domainId}/records/{recordId}`	Admin	Removes a record from the domain.
Delete records	`DELETE /domains/{domainId}/records?id={recordId1}&id={recordId2}`	Admin	Removes multiple records from the domain.

Reverse DNS

Note: To create a PTR record for a cloud load balancer or cloud server, you must also have at least the Observer role for the service you are associating the PTR record with.

Method	API action	Role	Description
List PTR records	`GET /rdns/{service-name}?href={deviceResourceUri}`	Admin, Creator, Observer	Lists all PTR records configured for a Rackspace Cloud device.
Show PTR record	`GET /rdns/{service-name}/{recordId}?href={deviceResourceUri}`	Admin, Creator, Observer	Lists details for a specific PTR record associated with a Rackspace Cloud device.
Add PTR records	`POST /rdns`	Admin, Creator	Adds one or more new PTR records for a Rackspace Cloud device.
Update PTR records	`PUT /rdns`	Admin, Creator	Modifies one or more PTR records associated with a Rackspace Cloud device.
Delete PTR records	`DELETE /rdns/{service-name}?href={deviceResourceUri}&ip={optionalIpAddress}`	Admin	Removes one or all PTR records associated with a Rackspace Cloud device.

Job Status

Method	API action	Role	Description
View Jobs Status	`GET /status/{jobId}?showDetails=[true\|false] GET /status?/showDetails=true\|false&showErrors=true\| \ false&showRunning=true\|false&showCompleted=true\|false&limit={int1}&offset={int2}`	Admin, Creator, Observer	Lists the status of all asynchronous job requests for an account and filters the information requested by using the optional Boolean request parameters.

Related articles

Updated 9 days ago