Hi, I would like to discuss CloudStack roles capabilities. As far as I understand, there are 3 distinct roles and there is no possibility to change any role permissions. Sometimes it's not so comfortable for situation when it is needed to allow some action from one role to another one. For example, if you would like to allow USER new action "Add account", you can't. Because there is no API command for USER. What about new roles? Have you got any ideas how to extend the CloudStack mechanism of roles creation? It will be more convenient if there is something that allow to create custom roles with needed permissions. For example, give basic role ADMIN or USER and then create new role based on it, change permissions(remove, add). Something like Role's constructor. Also I would like to know if somebody else needs similar extension?
Fill free to write any ideas. Thanks a lot, Olga
