DaanHoogland commented on issue #10031: URL: https://github.com/apache/cloudstack/issues/10031#issuecomment-2516351565
> > Do you really feel this is hurtful @scottsignal ? > > It's not hurtful, but it took us some time to figure out what the problem was. We created a Root Admin role that denied access to `*SystemVM*` (We needed them to be able to create Domain Admin Accounts & Networks w/VLANS). After doing some comparing of ListAPI this was the one that stood out. > > Is there a valid reason a Doman Admin should be able to use `listSystemVmsUsageHistory`? It seems odd since a Domain Admin can't even run `ListSystemVMs` I do not know of a reason. It might have been a slip of the keyboard, or someone wanted domain admins to be able to see the costs burned in their domain. I can imagine usage being of interest to a domain admin. So, yes, there might be a valid reason. I agree that it seems counter intuitive somewhat but not a bug. By the looks you found a valid way to deal with it. I was asking because I wonder if we want this solved in code or "solved" in documentation. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
