<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:o365IconsIE8;}
@font-face
{font-family:o365IconsMouse;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
p.ms-cui-menu, li.ms-cui-menu, div.ms-cui-menu
{mso-style-name:ms-cui-menu;
margin:0in;
margin-bottom:.0001pt;
background:white;
border:none;
padding:0in;
font-size:10.0pt;
font-family:"Segoe UI","sans-serif";
color:#333333;}
p.ms-cui-menusection-title, li.ms-cui-menusection-title, div.ms-cui-menusection-title
{mso-style-name:ms-cui-menusection-title;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
display:none;}
p.ms-cui-ctl, li.ms-cui-ctl, div.ms-cui-ctl
{mso-style-name:ms-cui-ctl;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:#333333;}
p.ms-cui-ctl-on, li.ms-cui-ctl-on, div.ms-cui-ctl-on
{mso-style-name:ms-cui-ctl-on;
margin:0in;
margin-bottom:.0001pt;
background:#DFEDFA;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.ms-cui-img-cont-float, li.ms-cui-img-cont-float, div.ms-cui-img-cont-float
{mso-style-name:ms-cui-img-cont-float;
margin-top:1.5pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.ms-cui-smenu-inner, li.ms-cui-smenu-inner, div.ms-cui-smenu-inner
{mso-style-name:ms-cui-smenu-inner;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.ms-owa-paste-option-icon, li.ms-owa-paste-option-icon, div.ms-owa-paste-option-icon
{mso-style-name:ms-owa-paste-option-icon;
margin-top:0in;
margin-right:4.5pt;
margin-bottom:0in;
margin-left:4.5pt;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.ms-rtepasteflyout-option, li.ms-rtepasteflyout-option, div.ms-rtepasteflyout-option
{mso-style-name:ms-rtepasteflyout-option;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.ms-cui-menusection, li.ms-cui-menusection, div.ms-cui-menusection
{mso-style-name:ms-cui-menusection;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.wf, li.wf, div.wf
{mso-style-name:wf;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.wf-family-owa, li.wf-family-owa, div.wf-family-owa
{mso-style-name:wf-family-owa;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:o365IconsMouse;}
p.msochpdefault, li.msochpdefault, div.msochpdefault
{mso-style-name:msochpdefault;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";}
p.wf-owa-play-large, li.wf-owa-play-large, div.wf-owa-play-large
{mso-style-name:wf-owa-play-large;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.wf-size-play-large, li.wf-size-play-large, div.wf-size-play-large
{mso-style-name:wf-size-play-large;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.wf-owa-triangle-down-small, li.wf-owa-triangle-down-small, div.wf-owa-triangle-down-small
{mso-style-name:wf-owa-triangle-down-small;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.emailstyle17
{mso-style-name:emailstyle17;
font-family:"Calibri","sans-serif";
color:windowtext;}
p.wf-family-owa1, li.wf-family-owa1, div.wf-family-owa1
{mso-style-name:wf-family-owa1;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:o365IconsIE8;}
p.wf-owa-play-large1, li.wf-owa-play-large1, div.wf-owa-play-large1
{mso-style-name:wf-owa-play-large1;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:white;}
p.wf-owa-play-large2, li.wf-owa-play-large2, div.wf-owa-play-large2
{mso-style-name:wf-owa-play-large2;
margin:0in;
margin-bottom:.0001pt;
text-align:center;
border:none;
padding:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:white;}
p.wf-size-play-large1, li.wf-size-play-large1, div.wf-size-play-large1
{mso-style-name:wf-size-play-large1;
margin:0in;
margin-bottom:.0001pt;
font-size:22.5pt;
font-family:"Times New Roman","serif";}
p.wf-size-play-large2, li.wf-size-play-large2, div.wf-size-play-large2
{mso-style-name:wf-size-play-large2;
margin:0in;
margin-bottom:.0001pt;
font-size:22.5pt;
font-family:"Times New Roman","serif";}
p.wf-owa-triangle-down-small1, li.wf-owa-triangle-down-small1, div.wf-owa-triangle-down-small1
{mso-style-name:wf-owa-triangle-down-small1;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:#666666;}
span.EmailStyle41
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hi </span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Sushma</span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Thanks for the reply.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Well, edit
</span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">/etc/nova/policy.json</span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"> do works for command “nova migrate”.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">But when I run command “nova live-migration”, I still get errors, in /var/log/nova/conductor.log:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:07:23.897 115385 INFO oslo.messaging._drivers.impl_qpid [-] Connected to AMQP server on 192.168.40.122:5672<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 ERROR nova.conductor.manager [req-63f0a004-ef69-47f4-aefb-e0fa194d99b9 fa970646fa92442fa14b2b759cf381a6 2eb6bd3a69ad454a90489dd12b9cdf3b] Migration of instance 446d96d7-2073-46ac-b40c-0f167fbd04b2
to host None unexpectedly failed.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager Traceback (most recent call last):<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager File "/usr/lib/python2.6/site-packages/nova/conductor/manager.py", line 757, in _live_migrate<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager block_migration, disk_over_commit)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager File "/usr/lib/python2.6/site-packages/nova/conductor/tasks/live_migrate.py", line 191, in execute<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager return task.execute()<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager File "/usr/lib/python2.6/site-packages/nova/conductor/tasks/live_migrate.py", line 56, in execute<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager self._check_host_is_up(self.source)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager File "/usr/lib/python2.6/site-packages/nova/conductor/tasks/live_migrate.py", line 87, in _check_host_is_up<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager service = db.service_get_by_compute_host(self.context, host)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager File "/usr/lib/python2.6/site-packages/nova/db/api.py", line 129, in service_get_by_compute_host<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager return IMPL.service_get_by_compute_host(context, host)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager File "/usr/lib/python2.6/site-packages/nova/db/sqlalchemy/api.py", line 145, in wrapper<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager nova.context.require_admin_context(args[0])<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager File "/usr/lib/python2.6/site-packages/nova/context.py", line 195, in require_admin_context<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager raise exception.AdminRequired()<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager AdminRequired: User does not have admin privileges<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.221 115395 TRACE nova.conductor.manager<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 ERROR oslo.messaging.rpc.dispatcher [-] Exception during message handling: Migration error: User does not have admin privileges<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher Traceback (most recent call last):<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher File "/usr/lib/python2.6/site-packages/oslo/messaging/rpc/dispatcher.py", line 133, in _dispatch_and_reply<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher incoming.message))<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher File "/usr/lib/python2.6/site-packages/oslo/messaging/rpc/dispatcher.py", line 176, in _dispatch<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher return self._do_dispatch(endpoint, method, ctxt, args)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher File "/usr/lib/python2.6/site-packages/oslo/messaging/rpc/dispatcher.py", line 122, in _do_dispatch<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher result = getattr(endpoint, method)(ctxt, **new_args)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher File "/usr/lib/python2.6/site-packages/oslo/messaging/rpc/server.py", line 139, in inner<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher return func(*args, **kwargs)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher File "/usr/lib/python2.6/site-packages/nova/conductor/manager.py", line 681, in migrate_server<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher block_migration, disk_over_commit)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher File "/usr/lib/python2.6/site-packages/nova/conductor/manager.py", line 783, in _live_migrate<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher raise exception.MigrationError(reason=ex)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher MigrationError: Migration error: User does not have admin privileges<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.226 115395 TRACE oslo.messaging.rpc.dispatcher<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.228 115395 ERROR oslo.messaging._drivers.common [-] Returning exception Migration error: User does not have admin privileges to caller<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2014-06-25 02:08:59.228 115395 ERROR oslo.messaging._drivers.common [-] ['Traceback (most recent call last):\n', ' File "/usr/lib/python2.6/site-packages/oslo/messaging/rpc/dispatcher.py", line 133, in _dispatch_and_reply\n
incoming.message))\n', ' File "/usr/lib/python2.6/site-packages/oslo/messaging/rpc/dispatcher.py", line 176, in _dispatch\n return self._do_dispatch(endpoint, method, ctxt, args)\n', ' File "/usr/lib/python2.6/site-packages/oslo/messaging/rpc/dispatcher.py",
line 122, in _do_dispatch\n result = getattr(endpoint, method)(ctxt, **new_args)\n', ' File "/usr/lib/python2.6/site-packages/oslo/messaging/rpc/server.py", line 139, in inner\n return func(*args, **kwargs)\n', ' File "/usr/lib/python2.6/site-packages/nova/conductor/manager.py",
line 681, in migrate_server\n block_migration, disk_over_commit)\n', ' File "/usr/lib/python2.6/site-packages/nova/conductor/manager.py", line 783, in _live_migrate\n raise exception.MigrationError(reason=ex)\n', 'MigrationError: Migration error: User
does not have admin privileges\n']<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Sushma Korati [mailto:sushma_korati@persistent.co.in]
<br>
<b>Sent:</b> Tuesday, June 24, 2014 4:43 PM<br>
<b>To:</b> Li, Chen; openstack@lists.openstack.org<br>
<b>Subject:</b> RE: How can I enable operation for non-admin user<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div id="OWAFontStyleDivID">
<p style="background:white"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt;background:white"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">Hi Li,<br>
<br>
As fas as I know to migrate an instance you'll need admin priviliges.<br>
But if you want to allow this operation for normal user then might try editing /etc/nova/policy.json file and give privileges.
<br>
<br>
File: /etc/nova/policy.json <br>
change "compute_extension:admin_actions:migrate": "rule:admin_api" to<br>
"compute_extension:admin_actions:migrate": "<strong><span style="font-family:"Tahoma","sans-serif"">rule:admin_or_owner</span></strong>"<br>
<br>
<br>
Regards,<br>
Sushma <o:p></o:p></span></p>
<div name="divtagdefaultwrapper">
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt;background:white"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
<div>
<div class="MsoNormal" align="center" style="text-align:center;background:white">
<span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#282828">
<hr size="2" width="98%" align="center">
</span></div>
<div id="divRplyFwdMsg">
<p class="MsoNormal" style="background:white"><b><span style="color:black">From:</span></b><span style="color:black"> Li, Chen <<a href="mailto:chen.li@intel.com">chen.li@intel.com</a>><br>
<b>Sent:</b> Tuesday, June 24, 2014 1:44 PM<br>
<b>To:</b> <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
<b>Subject:</b> [Openstack] How can I enable operation for non-admin user</span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#282828">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#282828"> <o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#282828">Hi list,<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828"> <o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828">I’m working under CentOS + icehouse.<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828"> <o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828">While, I have an non-admin user “demo”, and I can work under this this user with basic operations.<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828">Everything works well.<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828"> <o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828">But, I also hope this user can do some admin operations, such as migrate and so on, because currently when I run command:<o:p></o:p></span></p>
<p class="MsoNormal" style="text-indent:.5in;background:white"><span style="color:#282828">nova migrate ${my_instance}<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828">I get output:<o:p></o:p></span></p>
<p class="MsoNormal" style="text-indent:.5in;background:white"><span style="color:#282828">ERROR: Policy doesn't allow compute_extension:admin_actions:migrate to be performed. (HTTP 403) (Request-ID: req-698ad5b5-f1fe-48fc-b81f-a765020bf89f)<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828"> <o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828">Anyone can help me ?<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828"> <o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828">Thanks.<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#282828">-chen<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>