keystone-moon/examples/moon/policies/policy_rbac_authz/assignment.json


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

{
    "subject_assignments": {
        "role":{
          "admin": ["admin" ]
        }
    },

    "action_assignments": {
        "computing_action":{
          "pause": ["vm_admin"],
          "unpause": ["vm_admin"],
          "start": ["vm_admin"],
          "stop": ["vm_admin"],
          "list": ["vm_access", "vm_admin"],
          "create": ["vm_admin"]
        },
        "storage_action":{
          "get": ["vm_access"],
          "set": ["vm_access", "vm_admin"]
        }
    },

    "object_assignments": {
        "id": {
            "servers": ["servers"]
        }
    }
}