Roles
Roles are predefined sets
of privileges that can be configured from Red Hat Enterprise Virtualization
Manager. Roles provide access and management permissions to different levels of
resources in the data center, and to specific physical and virtual resources.
With multilevel
administration, any permissions which apply to a container object also apply to
all individual objects within that container. For example, when a host
administrator role is assigned to a user on a specific host, the user gains
permissions to perform any of the available host operations, but only on the
assigned host. However, if the host administrator role is assigned to a user on
a data center, the user gains permissions to perform host operations on all
hosts within the cluster of the data center.
Creating a New Role
Summary
If the role you require is
not on Red Hat Enterprise Virtualization's default list of roles, you can
create a new role and customize it to suit your purposes.
Procedure 2.2. Creating a New Role
- On the header bar, click the Configure button to open the Configure window. The window shows a list of default User and Administrator roles, and any custom roles.
- Click New. The New Role dialog box displays.
- Enter the Name and Description of the new role.
- Select either Admin or User as the Account Type.
- Use the Expand All or Collapse All buttons to view more or fewer of the permissions for the listed objects in theCheck Boxes to Allow Action list. You can also expand or collapse the options for each object.
- For each of the objects, select or clear the actions you wish to permit or deny for the role you are setting up.
- Click OK to apply the changes you have made. The new role displays on the list of roles.
Editing or Copying a Role
Procedure 2.3. Editing or Copying a
Role
- On the header bar, click the Configure button to open the Configure window. The window shows a list of default User and Administrator roles, and any custom roles.
- Select the role you wish to change. Click Edit to open the Edit Role window, or click Copy to open the Copy Role window.
- If necessary, edit the Name and Description of the role.
- Use the Expand All or Collapse All buttons to view more or fewer of the permissions for the listed objects. You can also expand or collapse the options for each object.
- For each of the objects, select or clear the actions you wish to permit or deny for the role you are editing.
- Click OK to apply the changes you have made.