rohityadavcloud commented on PR #11087: URL: https://github.com/apache/cloudstack/pull/11087#issuecomment-3034668147
Few comments; * I think you mean 'Resource Admin' and not manager, pl fix that * If all users/roles can list zones, then resource admin should be allowed to list all zones and be able to do all actions as allowed by the role (historically) such as VM deployment etc. Alternatively, there could be a global setting to allow toggling the behaviour for the Resource Admin role. * But^^, Resource Admin can be restricted & allowed to only administrate the dedicated zone (dedicated to the domain in which they are the resource admins) and allow historic actions (such as managing host, storage pool in such zones). This may need some fact finding as Resource Admins are not maintained/used for quite some time now. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@cloudstack.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
