Hi Jeroen, Allowing more APIs to role type ‘user’ may not be useful in listing the clusters. Have you considered tagging the hosts and creating two compute offerings that identify the clusters?
-Jithin From: Jeroen Kleijer <jeroen.klei...@gmail.com> Date: Monday, 9 December 2024 at 4:32 PM To: users@cloudstack.apache.org <users@cloudstack.apache.org> Subject: Custom role Hi all, We've set up Apache CloudStack (4.19.1.2), users are able to login and we were able to dedicate resources to their accounts. We basically created an Account A and dedicated two clusters to it, called CL01 and CL02. Our Account A has been assigned the role of "User" since all user accounts only need to be able to create VMs, delete them and stop and start them. However, we would like the people in Account A, when deploying a new instance, to be able to choose between cluster CL01 and CL02 (and perhaps even the individual hosts if possible) I've looked into the role "User", created a copy of it and added several "list" API calls to it, such as listPods, listClusters, listHosts, listDedicatedClusters and listDedicatedHosts, but when a user creates a new instance through the GUI, the selection of the pod, cluster or host is not offered. (the selection of zone is offered though) How would I go about doing this where an end-user is restricted and doesn't need to see more than they should but still have the option of choosing between the resources that belong to them? (if this is even possible at all) Kind regards, Jeroen Kleijer
