← Back to team overview

openstack team mailing list archive

[OpenStack] Limiting new roles

 

Hi everyboy,

I want to create a new role, named "another-admin", so this role only  can
create tentants and roles but cannnot change quotas or modify images and
all other actions that admin role can do.

I read about create rules in the policy.json of each service (nova,
keystone, glance, swift) but my doubt is: How can I limit the
views/templates/urls of Horizon, I mean, I want that the role
"another-admin" can not see templates related to glance and can not see
that menu.

Thanks in advance,
Best Regards.

Follow ups