openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #18066
[OpenStack] Limiting new roles
Hi everyboy,
I want to create a new role, named "another-admin", so this role only can
create tentants and roles but cannnot change quotas or modify images and
all other actions that admin role can do.
I read about create rules in the policy.json of each service (nova,
keystone, glance, swift) but my doubt is: How can I limit the
views/templates/urls of Horizon, I mean, I want that the role
"another-admin" can not see templates related to glance and can not see
that menu.
Thanks in advance,
Best Regards.
Follow ups