Nova/rbac

API			Project-scope			System-scope
Route	Method	RBAC Name	reader	member	admin	reader	member	admin	Notes
/	GET								no-auth
/v2, v2.1	GET								no-auth
/os-aggregates	GET	os-aggregates:index
	POST	os-aggregates:create	x
/os-aggregates/{aggregate_id}	GET	os-aggregates:show
	PUT	os-aggregates:update	x
	DELETE	os-aggregates:delete		x
/os-aggregates/{aggregate_id}/action	POST (add_host)	os-aggregates:add_host
	POST (remove_host)	os-aggregates:remove_host	x
	POST (set_metadata)	os-aggregates:set_metadata	x
/os-aggregates/{aggregate_id}/images	POST	os-aggregates:images
/os-hosts	GET	os-hosts:list
/os-hosts/{host_name}/	GET	os-hosts:show	x	x	x
	PUT	os-hosts:update	x
/os-hosts{host_name}/reboot	GET (but this is write operation)	os-hosts:reboot
/os-hosts{host_name}/shutdown	GET (but this is write operation)	os-hosts:shutdown
/os-hosts{host_name}/startup	GET (but this is write operation)	os-hosts:start
/os-hypervisors	GET	os-hypervisors:list
/os-hypervisors/details	GET	os-hypervisors:list-detail
/os-hypervisors/statistics	GET	os-hypervisors:statistics
/os-hypervisors/{hypervisor_id}	GET	os-hypervisors:show	x
/os-hypervisors/{hypervisor_id}/uptime	GET	os-hypervisors:uptime	x	x	x	x	x
/os-hypervisors/{hypervisor_hostname_pattern}/search	GET	os-hypervisors:search
/os-hypervisors/{hypervisor_hostname_pattern}/servers	GET	os-hypervisors:servers
/os-services	GET	os-services:list
/os-services/{service_id}	PUT	os-services:update
	DELETE	os-services:delete		x
/os-availability-zone	GET	os-availability-zone:list	x
/os-availability-zone/detail	GET	os-availability-zone:detail	x	x	x	x	x
/flavors	POST	os-flavor-manage:create	x	x	x	x	x
		os-flavor-extra-specs:index -> (to show flavor extraspecs)		x			x
/flavors/detail	GET	os-flavor-extra-specs:index -> (to show flavor extraspecs)		x			x
/flavors/{flavor_id}	PUT	os-flavor-manage:update	x	x	x	x	x
		os-flavor-extra-specs:index -> (to show flavor extraspecs)		x			x
	DELETE	os-flavor-manage:delete		x			x
	GET	os-flavor-extra-specs:index -> (to show flavor extraspecs)		x			x
/flavors/{flavor_id}/os-flavor-access	GET	os-flavor-access	x	x	x	x	x
/flavors/{flavor_id}/action	POST (addTenantAccess)	os-flavor-access:add_tenant_access
	POST (removeTenantAccess)	os-flavor-access:remove_tenant_access
/flavors/{flavor_id}/os-extra_specs/	POST	os-flavor-extra-specs:create
	GET	os-flavor-extra-specs:index		x
/flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key}	GET	os-flavor-extra-specs:show
	PUT	os-flavor-extra-specs:update		x
	DELETE	os-flavor-extra-specs:delete		x
/servers	POST	servers:create	x	x	x	x	x
		servers:create:forced_host		x			x
		servers:create:requested_destination		x			x
		servers:create:attach_volume		x			x
		servers:create:attach_network		x			x
		servers:create:trusted_certs		x			x
		servers:create:zero_disk_flavor		x			x
		network:attach_external_network		x			x
	GET	servers:index		x			x
		servers:index:get_all_tenants		x			x
		servers:allow_all_filters		x			x
/servers/detail	GET	servers:detail	x	x	x	x	x
		servers:detail:get_all_tenants		x			x
		servers:allow_all_filters		x			x
		servers:show:host_status		x			x
		servers:show:host_status:unknown-only		x			x
/servers/{server_id}	GET	servers:show	x	x	x	x	x
		servers:show:host_status		x			x
		servers:show:host_status:unknown-only		x			x
	PUT	servers:update		x			x
		servers:show:host_status		x			x
		servers:show:host_status:unknown-only		x			x
	DELETE	servers:delete		x			x
/servers/{server_id}/action	POST (rebuild)	servers:rebuild
		servers:show:host_status		x			x
		servers:show:host_status:unknown-only		x			x
		servers:rebuild:trusted_certs		x			x
	POST (confirmResize)	servers:confirm_resize
	POST (revertResize)	servers:revert_resize
	POST (resize)	servers:resize
		servers:resize:cross_cell		x			x
	POST (reboot)	servers:reboot
	POST (createImage)	servers:create_image
		servers:create_image:allow_volume_backed		x			x
	POST (os-start)	servers:start
	POST (os-stop)	servers:stop
	POST (resume)	os-suspend-server:resume
	POST (suspend)	os-suspend-server:suspend
	POST (os-resetState)	os-admin-actions:reset_state
	POST (injectNetworkInfo)	os-admin-actions:inject_network_info
	POST (changePassword)	os-admin-password
	POST (os-getConsoleOutput)	os-console-output
	POST (createBackup)	os-create-backup
	POST (restore)	os-deferred-delete:restore
	POST (forceDelete)	os-deferred-delete:force
	POST (evacuate)	os-evacuate
	POST (lock)	os-lock-server:lock
	POST (unlock)	os-lock-server:unlock
		os-lock-server:unlock:unlock_override
	POST (migrate)	os-migrate-server:migrate
	POST (os-migrateLive)	os-migrate-server:migrate_live
	POST (addFixedIp)	os-multinic:add
	POST (removeFixedIp)	os-multinic:remove
	POST (pause)	os-pause-server:pause
	POST (unpause)	os-pause-server:unpause
	POST (os-getRDPConsole)	os-remote-consoles
	POST (os-getSerialConsole)	os-remote-consoles
	POST (os-getSPICEConsole)	os-remote-consoles
	POST (os-getVNCConsole)	os-remote-consoles
	POST (rescue)	os-rescue
	POST (rescue)	os-unrescue
	POST (shelve)	os-shelve:shelve
	POST (unshelve)	os-shelve:unshelve
	POST (shelveOffload)	os-shelve:shelve_offload
/servers/{server_id}/os-interface	POST	network:attach_external_network
		os-attach-interfaces:create
	GET	os-attach-interfaces:list
/servers/{server_id}/os-interface/{port_id}	DELETE	os-attach-interfaces:delete
	GET	os-attach-interfaces:show
/servers/{server_id}/os-instance-actions	GET	os-instance-actions:list
/servers/{server_id}/os-instance-actions/{request_id}	GET	os-instance-actions:show
		os-instance-actions:events
		os-instance-actions:events:details
/servers/{server_id}/ips	GET	ips:index
/servers/{server_id}/ips/{network_label}	GET	ips:show
/servers/{server_id}/remote-consoles	POST	os-remote-consoles
/servers/{server_id}/diagnostics	POST	os-server-diagnostics
/servers/{server_id}/metadata	PUT	server-metadata:update_all
	GET	server-metadata:index
	POST	server-metadata:create
/servers/{server_id}/metadata/{key}	PUT	server-metadata:update
	DELETE	server-metadata:delete
	GET	server-metadata:show
/servers/{server_id}/os-server-password	GET	os-server-password:show
	DELETE	os-server-password:clear
/servers/{server_id}/tags	PUT	os-server-tags:update_all
	GET	os-server-tags:index
	DELETE	os-server-tags:delete_all
/servers/{server_id}/tags/{tag}	PUT	os-server-tags:update
	DELETE	os-server-tags:delete
	GET	os-server-tags:show
/servers/{server_id}/topology	GET	server:topology:index
		server:topology:host:index
/servers/{server_id}/migrations	GET	servers:migrations:index
/servers/{server_id}/migrations/{migration_id}/action (force_complete)	POST	servers:migrations:force_complete
/servers/{server_id}/migrations/{migration_id}	GET	servers:migrations:show
	DELETE	servers:migrations:delete

Questions: