Nova/rbac
< Nova
API | Project-scope | System-scope | |||||||
---|---|---|---|---|---|---|---|---|---|
Route | Method | RBAC Name | reader | member | admin | reader | member | admin | Notes |
/ | GET | no-auth | |||||||
/v2, v2.1 | GET | no-auth | |||||||
/os-aggregates | GET | os-aggregates:index | o | ||||||
POST | os-aggregates:create | o | |||||||
/os-aggregates/{aggregate_id} | GET | os-aggregates:show | o | ||||||
PUT | os-aggregates:update | o | |||||||
DELETE | os-aggregates:delete | o | |||||||
/os-aggregates/{aggregate_id}/action | POST (add_host) | os-aggregates:add_host | o | ||||||
POST (remove_host) | os-aggregates:remove_host | o | |||||||
POST (set_metadata) | os-aggregates:set_metadata | o | |||||||
/os-aggregates/{aggregate_id}/images | POST | os-aggregates:images | o | ||||||
/os-hosts | GET | os-hosts:list | o | ||||||
/os-hosts/{host_name}/ | GET | os-hosts:show | o | ||||||
PUT | os-hosts:update | o | |||||||
/os-hosts{host_name}/reboot | GET (but this is write operation) | os-hosts:reboot | o | ||||||
/os-hosts{host_name}/shutdown | GET (but this is write operation) | os-hosts:shutdown | o | ||||||
/os-hosts{host_name}/startup | GET (but this is write operation) | os-hosts:start | o | ||||||
/os-hypervisors | GET | os-hypervisors:list | o | o | |||||
/os-hypervisors/details | GET | os-hypervisors:list-detail | o | ||||||
/os-hypervisors/statistics | GET | os-hypervisors:statistics | o | ||||||
/os-hypervisors/{hypervisor_id} | GET | os-hypervisors:show | o | ||||||
/os-hypervisors/{hypervisor_id}/uptime | GET | os-hypervisors:uptime | o | ||||||
/os-hypervisors/{hypervisor_hostname_pattern} /search | GET | os-hypervisors:search | o | ||||||
/os-hypervisors/{hypervisor_hostname_pattern} /servers | GET | os-hypervisors:servers | o | ||||||
/os-services | GET | os-services:list | o | ||||||
/os-services/{service_id} | PUT | os-services:update | o | ||||||
DELETE | os-services:delete | o | |||||||
/os-availability-zone | GET | os-availability-zone:list | RULE_ANY | ||||||
/os-availability-zone/detail | GET | os-availability-zone:detail | o | o | |||||
/flavors | POST | os-flavor-manage:create | o | ||||||
os-flavor-extra-specs:index -> (to show flavor extraspecs) | o | o | |||||||
/flavors/detail | GET | os-flavor-extra-specs:index -> (to show flavor extraspecs) | o | o | |||||
/flavors/{flavor_id} | PUT | os-flavor-manage:update | o | ||||||
os-flavor-extra-specs:index -> (to show flavor extraspecs) | o | o | |||||||
DELETE | os-flavor-manage:delete | o | |||||||
GET | os-flavor-extra-specs:index -> (to show flavor extraspecs) | o | o | ||||||
/flavors/{flavor_id}/os-flavor-access | GET | os-flavor-access | o | ||||||
/flavors/{flavor_id}/action | POST (addTenantAccess) | os-flavor-access:add_tenant_access | o | ||||||
POST (removeTenantAccess) | os-flavor-access:remove_tenant_access | o | |||||||
/flavors/{flavor_id}/os-extra_specs/ | POST | os-flavor-extra-specs:create | o | ||||||
GET | os-flavor-extra-specs:index | o | o | ||||||
/flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key} | GET | os-flavor-extra-specs:show | o | o | |||||
PUT | os-flavor-extra-specs:update | o | |||||||
DELETE | os-flavor-extra-specs:delete | o | |||||||
/servers | POST | servers:create | o | ||||||
servers:create:forced_host | o | ||||||||
servers:create:requested_destination | o | ||||||||
servers:create:attach_volume | o | ||||||||
servers:create:attach_network | o | ||||||||
servers:create:trusted_certs | o | ||||||||
servers:create:zero_disk_flavor | o | ||||||||
network:attach_external_network | o | ||||||||
GET | servers:index | o | |||||||
servers:index:get_all_tenants | o | ||||||||
servers:allow_all_filters | o | ||||||||
/servers/detail | GET | servers:detail | o | ||||||
servers:detail:get_all_tenants | o | ||||||||
servers:allow_all_filters | o | ||||||||
servers:show:host_status | o | ||||||||
servers:show:host_status:unknown-only | o | ||||||||
os-extended-server-attributes | o | ||||||||
os-flavor-extra-specs:index -> (to show flavor extraspecs) | o | ||||||||
/servers/{server_id} | GET | servers:show | o | ||||||
servers:show:host_status | o | ||||||||
servers:show:host_status:unknown-only | o | ||||||||
os-extended-server-attributes | o | ||||||||
os-flavor-extra-specs:index -> (to show flavor extraspecs) | o | ||||||||
PUT | servers:update | o | |||||||
servers:show:host_status | o | ||||||||
servers:show:host_status:unknown-only | o | ||||||||
os-extended-server-attributes | o | ||||||||
os-flavor-extra-specs:index -> (to show flavor extraspecs) | o | ||||||||
DELETE | servers:delete | o | |||||||
/servers/{server_id}/action | POST (rebuild) | servers:rebuild | o | ||||||
servers:show:host_status | o | ||||||||
servers:show:host_status:unknown-only | o | ||||||||
servers:rebuild:trusted_certs | o | ||||||||
os-extended-server-attributes | o | ||||||||
os-flavor-extra-specs:index -> (to show flavor extraspecs) | o | ||||||||
POST (confirmResize) | servers:confirm_resize | o | |||||||
POST (revertResize) | servers:revert_resize | o | |||||||
POST (resize) | servers:resize | o | |||||||
servers:resize:cross_cell | no-one by default (as per current default) | ||||||||
POST (reboot) | servers:reboot | o | |||||||
POST (createImage) | servers:create_image | o | |||||||
servers:create_image: allow_volume_backed | o | ||||||||
POST (os-start) | servers:start | o | |||||||
POST (os-stop) | servers:stop | o | |||||||
POST (resume) | os-suspend-server:resume | o | |||||||
POST (suspend) | os-suspend-server:suspend | o | |||||||
POST (os-resetState) | os-admin-actions:reset_state | o | |||||||
POST (injectNetworkInfo) | os-admin-actions:inject_network_info | o | |||||||
POST (changePassword) | os-admin-password | o | |||||||
POST (os-getConsoleOutput) | os-console-output | o | |||||||
POST (createBackup) | os-create-backup | o | |||||||
POST (restore) | os-deferred-delete:restore | o | |||||||
POST (forceDelete) | os-deferred-delete:force | o | |||||||
POST (evacuate) | os-evacuate | o | |||||||
POST (lock) | os-lock-server:lock | o | |||||||
POST (unlock) | os-lock-server:unlock | o | |||||||
os-lock-server:unlock:unlock_override | o | ||||||||
POST (migrate) | os-migrate-server:migrate | o | |||||||
POST (os-migrateLive) | os-migrate-server:migrate_live | o | |||||||
POST (addFixedIp) | os-multinic:add | o | |||||||
POST (removeFixedIp) | os-multinic:remove | o | |||||||
POST (pause) | os-pause-server:pause | o | |||||||
POST (unpause) | os-pause-server:unpause | o | |||||||
POST (os-getRDPConsole) | os-remote-consoles | o | |||||||
POST (os-getSerialConsole) | os-remote-consoles | o | |||||||
POST (os-getSPICEConsole) | os-remote-consoles | o | |||||||
POST (os-getVNCConsole) | os-remote-consoles | o | |||||||
POST (rescue) | os-rescue | o | |||||||
POST (rescue) | os-unrescue | o | |||||||
POST (shelve) | os-shelve:shelve | o | |||||||
POST (unshelve) | os-shelve:unshelve | o | |||||||
POST (shelveOffload) | os-shelve:shelve_offload | o | |||||||
POST (addFloatingIp) | os-floating-ips:add | o | |||||||
POST (removeFloatingIp) | os-floating-ips:remove | o | |||||||
POST (addSecurityGroup) | os-security-groups::add | o | |||||||
POST (removeSecurityGroup) | os-security-groups::remove | o | |||||||
/servers/{server_id}/os-interface | POST | network:attach_external_network | o | ||||||
os-attach-interfaces:create | o | ||||||||
GET | os-attach-interfaces:list | o | |||||||
/servers/{server_id}/os-interface/{port_id} | DELETE | os-attach-interfaces:delete | o | ||||||
GET | os-attach-interfaces:show | o | |||||||
/servers/{server_id}/os-instance-actions | GET | os-instance-actions:list | o | ||||||
/servers/{server_id}/os-instance-actions/{request_id} | GET | os-instance-actions:show | o | ||||||
os-instance-actions:events | o | ||||||||
os-instance-actions:events:details | o | ||||||||
/servers/{server_id}/ips | GET | ips:index | o | ||||||
/servers/{server_id}/ips/{network_label} | GET | ips:show | o | ||||||
/servers/{server_id}/remote-consoles | POST | os-remote-consoles | o | ||||||
/servers/{server_id}/diagnostics | GET | os-server-diagnostics | o | ||||||
/servers/{server_id}/metadata | PUT | server-metadata:update_all | o | ||||||
GET | server-metadata:index | o | |||||||
POST | server-metadata:create | o | |||||||
/servers/{server_id}/metadata/{key} | PUT | server-metadata:update | o | ||||||
DELETE | server-metadata:delete | o | |||||||
GET | server-metadata:show | o | |||||||
/servers/{server_id}/os-server-password | GET | os-server-password:show | o | ||||||
DELETE | os-server-password:clear | o | |||||||
/servers/{server_id}/tags | PUT | os-server-tags:update_all | o | ||||||
GET | os-server-tags:index | o | |||||||
DELETE | os-server-tags:delete_all | o | |||||||
/servers/{server_id}/tags/{tag} | PUT | os-server-tags:update | o | ||||||
DELETE | os-server-tags:delete | o | |||||||
GET | os-server-tags:show | o | |||||||
/servers/{server_id}/topology | GET | server:topology:index | o | ||||||
server:topology:host:index | o | ||||||||
/servers/{server_id}/migrations | GET | servers:migrations:index | o | ||||||
/servers/{server_id}/migrations/ {migration_id} /action (force_complete) | POST | servers:migrations:force_complete | o | ||||||
/servers/{server_id}/migrations/ {migration_id} | GET | servers:migrations:show | o | ||||||
DELETE | servers:migrations:delete | o | |||||||
/servers/{server_id}/os-volume_attachments | GET | os-volumes-attachments:index | |||||||
POST | os-volumes-attachments:create | ||||||||
/servers/{server_id}/os-volume_attachments /{volume_id} | GET | os-volumes-attachments:show | o | ||||||
DELETE | os-volumes-attachments:delete | o | |||||||
PUT | os-volumes-attachments:update | o | |||||||
os-volumes-attachments:swap | o | ||||||||
/os-assisted-volume-snapshots | POST | os-assisted-volume-snapshots:create | o | ||||||
/os-assisted-volume-snapshots/{snapshot_id} | DELETE | os-assisted-volume-snapshots:delete | o | ||||||
/os-baremetal-nodes | GET | os-baremetal-nodes:list | o | ||||||
/os-baremetal-nodes/{node_id} | GET | os-baremetal-nodes:show | o | ||||||
/os-console-auth-tokens/{console_token} | GET | os-console-auth-tokens | o | ||||||
/extensions | GET | extensions | Everyone | ||||||
/extensions/{alias} | GET | extensions | Everyone | ||||||
/os-floating-ip-pools | GET | os-floating-ip-pools | Everyone | ||||||
/os-floating-ips | GET | os-floating-ips:list | o | o | |||||
POST | os-floating-ips:create | o | |||||||
/os-floating-ips/{floating_ip_id} | GET | os-floating-ips:show | o | o | |||||
DELETE | os-floating-ips:delete | o | |||||||
/os-instance_usage_audit_log | GET | os-instance-usage-audit-log:list | o | ||||||
/os-instance_usage_audit_log/ {before_timestamp} | GET | os-instance-usage-audit-log:show | o | ||||||
/os-keypairs | GET | os-keypairs:list | o | ||||||
POST | os-keypairs:create | o | |||||||
/os-keypairs/{keypair_name} | GET | os-keypairs:show | o | ||||||
DELETE | os-keypairs:delete | o | |||||||
/limits | GET | limits | Everyone | ||||||
GET | limits:other_project | o | |||||||
/os-migrations | GET | os-migrations:index | o | ||||||
/os-networks | GET | os-networks:list | o | o | |||||
/os-networks/{network_id} | GET | os-networks:show | o | o | |||||
/os-quota-class-sets/{quota_class} | GET | os-quota-class-sets:show | o | ||||||
PUT | os-quota-class-sets:update | o | |||||||
/os-quota-sets/{tenant_id} | DELETE | os-quota-sets:delete | o | ||||||
PUT | os-quota-sets:update | o | |||||||
GET | os-quota-sets:show | o | |||||||
/os-quota-sets/{tenant_id}/detail | GET | os-quota-sets:detail | o | ||||||
/os-quota-sets/{tenant_id}/defaults | GET | os-quota-sets:defaults | Everyone | ||||||
/os-security-groups | GET | os-security-groups:get | o | ||||||
POST | os-security-groups:create | o | |||||||
/os-security-groups/{security_group_id} | DELETE | os-security-groups:delete | o | ||||||
PUT | os-security-groups:update | o | |||||||
GET | os-security-groups:show | o | |||||||
/os-security-group-rules | POST | os-security-groups:rule:create | o | ||||||
/os-security-group-rules/{security_group_id} | DELETE | os-security-groups:rule:delete | o | ||||||
/servers/{server_id}/os-security-groups | GET | os-security-groups:list | o | ||||||
/os-server-external-events | POST | os-server-external-events:create | o | ||||||
/os-server-groups | POST | os-server-groups:create | o | ||||||
GET | os-server-groups:index | o | |||||||
GET | os-server-groups:index:all_projects | o | |||||||
/os-server-groups/{server_group_id} | GET | os-server-groups:show | o | ||||||
DELETE | os-server-groups:delete | o | |||||||
/os-simple-tenant-usage/{tenant_id} | GET | os-simple-tenant-usage:show | o | ||||||
/os-simple-tenant-usage | GET | os-simple-tenant-usage:list | o | ||||||
/os-tenant-networks/{network_id} | GET | os-tenant-networks:show | o | ||||||
/os-tenant-networks | GET | os-tenant-networks:list | o | ||||||
/os-volumes | GET | os-volumes:list | o | ||||||
POST | os-volumes:create | o | |||||||
/os-volumes/{volume_id} | GET | os-volumes:show | o | ||||||
DELETE | os-volumes:delete | o | |||||||
/os-volumes/detail | GET | os-volumes:detail | o | ||||||
/os-snapshots | GET | os-volumes:snapshots:list | o | ||||||
POST | os-volumes:snapshots:create | o | |||||||
/os-snapshots/ {snapshot_id} | GET | os-volumes:snapshots:show | o | ||||||
DELETE | os-volumes:snapshots:delete | o | |||||||
/os-snapshots/detail | GET | os-volumes:snapshots:detail | o |
Questions: