User Roles
User roles in the VDC tenant model include the operation administrator, VDC administrator, agent administrator, VDC operator, VDC read-only administrator and customized roles.
- When adding a user for a VDC, you need to select a role for the user.
- Pay attention to the following when creating customized roles:
- Customized roles can be created by operation administrators and first-level VDC administrators.
- Operation administrators and first-level VDC administrators can modify and delete roles created by themselves.
- Roles created by an operation administrator are globally visible, and roles created by a first-level VDC administrator is visible only to the first-level VDC to which the first-level VDC administrator belongs and its lower-level VDCs.
Operation Administrators
Figure 7-9 shows all rights and responsibilities of operation administrators.
VDC Administrators
Figure 7-10 shows all rights and responsibilities of VDC administrators.
Agent Administrators
An agent administrator can perform agent maintenance operations on first-level VDCs on which the agent administrator has agent maintenance permissions. The rights of an agent administrator are similar to those of a first-level VDC administrator.
VDC Operators
VDC Read-Only Administrators
VDC read-only administrators can only query information about resources, users, projects, and self O&M in the VDCs to which they belong and their lower-level VDCs. Figure 7-12 shows main tasks of VDC read-only administrators.
Customized Roles
Customized roles have operation rights assigned when being customized.