Permissions Matrix for Cloud Block Storage
The Cloud Block Storage permissions matrix displays specific permissions for the following role-based access control (RBAC) roles:
- Admin provides full access to create, read, update, and delete.
- Creator provides access to create, read, and update.
- Observer provides read-only access.
The matrix displays the Cloud Block Storage methods, their corresponding RESTful API commands, and the RBAC roles that are supported.
Volumes
| Method | API action | Role | Description |
|---|---|---|---|
| Create a volume | POST /v1/{tenant_Id}/volumes | Creator, Admin | Creates a volume. |
| Retrieve volumes | GET /v1/{tenant_id}/volumes | Observer, Creator, Admin | Retrieves summary information for all block storage volumes that the tenant who submits the request can access. |
| Retrieve volumes (detailed) | GET /v1/{tenant_id}/volumes/detail | Observer, Creator, Admin | Retrieves detailed information for all block storage volumes that the tenant who submits the request can access. |
| Retrieve details for a volume | GET /v1/{tenant_id}/volumes/{volume_id} | Observer, Creator, Admin | Retrieves details for a specified volume. |
| Update a volume | PUT /v1/{tenant_id}/volumes/{volume_id} | Observer, Creator, Admin | Updates the name and description for a volume. |
| Delete a volume | DELETE /v1/{tenant_id}/volumes/{volume_id} | Admin | Deletes a single volume. |
Volume types
| Method | API Action | Role | Description |
|---|---|---|---|
| Retrieve volume types | GET /v1/{tenant_id}/types | Observer, Creator, Admin | Retrieves volume types. |
| Retrieve volume type details | GET /v1/{tenant_id}/types/{volume_type_id} | Creator, Admin | Retrieves details for a specified volume type. |
Snapshots
| Method | API Action | Role | Description |
|---|---|---|---|
| Create a snapshot | POST /v1/{tenant_id}/snapshots | Creator, Admin | Creates a snapshot. |
| Retrieve snapshots | GET /v1/{tenant_id}/snapshots | Observer, Creator, Admin | Retrieves summary information for all block storage snapshots that the tenant who submits the request can access. |
| Retrieve snapshots (detailed) | GET /v1/{tenant_id}/snapshots/detail | Observer, Creator, Admin | Retrieves detailed information for all block storage snapshots that the tenant who submits the request can access. |
| Retrieve details for a snapshot | GET /v1/{tenant_id}/snapshots/{snapshot_id} | Observer, Creator, Admin | Retrieves details for the specified snapshot. |
| Delete a snapshot | DELETE /v1/{tenant_id}/snapshots/{snapshot_id} | Admin only | Deletes a snapshot. |
Related articles
Updated about 1 year ago