25 Sep
2020
25 Sep
'20
8:28 a.m.
Dear Openstack,
We have deployed openstack train branch.
This mail is in regards to the default role in openstack. we are trying to create a read-only user i.e, the said user can only view in the web portal(horizon)/using cli commands.
the user cannot create an instance or delete an instance , the same with any resource.
we created a user in a project test with reader role, but in horizon/cli able to create and delete instance and similar to other access also
if you so kindly help us fix this issue would be grateful.
the commands used for creation
$ openstack user create --domain default --password-prompt mailto:test-reader@test.com
$ openstack role add --project test --user mailto:gowtham.sankar@zohocorp.com reader
Thanks and Regards
sysadmin