Permissions matrix for Cloud Images
The Cloud Images permissions matrix displays specific permissions for the
following roles:
- Admin provides full access to create, read, update, and delete.
- Creator provides access to create, read, and update.
- Observer provides read-only access.
The matrix displays the Cloud Images methods, their corresponding RESTful API commands, and the roles that are supported.
| Method | API action | Role | Description |
|---|---|---|---|
| List images | GET /v2/images | Observer, Creator, Admin | Lists public virtual machine (VM) images. |
| Get image details | GET /v2/images/{image_id} | Observer, Creator, Admin | Gets the details for the specified image. |
| Update an Image | PATCH /v2/images/{image_id} | Admin | Updates the specified image. |
| Delete an Image | DELETE /v2/images/{image_id} | Admin | Deletes the specified image. |
| Create image member | POST /v2/images/{image_id}/members | Creator, Admin | Adds the specified tenant ID as an image member (user). |
| List image members | GET /v2/images/{image_id}/members | Observer, Creator, Admin | Returns a collection of members (user) with whom the image has been shared. |
| Get image member details | GET /v2/images/{image_id}/members/{member_id} | Observer, Creator, Admin | Gets details for a specified image member. |
| Update image member | PUT /v2/images/{image_id}/members/{member_id} | Admin | Sets the specified status for the specified member (user) of the specified image. |
| Delete image member | DELETE /v2/images/{image_id}/members/{member_id} | Admin | Deletes the specified tenant ID from the member list of the specified image. |
| Add image tag | PUT /v2/images/{image_id}/tags/{tag} | Observer, Creator, Admin | Adds the specified tag to the specified image. |
| Delete image tag | DELETE /v2/images/{image_id}/tags/{tag} | Observer, Creator, Admin | Deletes the specified tag from the specified image. |
| Get images schema | GET /v2/schemas/images | Observer, Creator, Admin | Gets a json-schema document that represents an images entity, which is a container of image entities. |
| Get image schema | GET /v2/schemas/image | Observer, Creator, Admin | Gets a json-schema document that represents a single image entity. |
| Get image members schema | GET /v2/schemas/members | Observer, Creator, Admin | Gets a json-schema document that represents an image members entity. |
| Get image member schema | GET /v2/schemas/member | Observer, Creator, Admin | Gets a json-schema document that represents an image member entity. |
| Get task schema | GET /v2/schemas/task | Observer, Creator, Admin | Gets a json-schema document that represents a specified task entity. |
| Get tasks schema | GET /v2/schemas/tasks | Observer, Creator, Admin | Gets a json-schema document that represents a tasks entity. |
| List tasks | GET /v2/tasks | Observer, Creator, Admin | Returns a collection of tasks. |
| Create a task to import or export images | POST /v2/tasks | Admin | Creates an import or export image task. |
| Get task details | GET /v2/tasks/{task_id} | Observer, Creator, Admin | Gets the details for a specified task. |
Related article
Role-Based Access Control (RBAC) permissions matrix for Cloud Hosting
Updated about 1 year ago