keystone-moon/examples/moon/policies/policy_rbac_authz/scope.json


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

{
  "subject_category_scope": {
    "role": [
      "admin"
    ]
  },

  "action_category_scope": {
    "computing_action": [
      "vm_access",
      "vm_admin"
    ],
    "storage_action": [
      "vm_access",
      "vm_admin"
    ]
  },

  "object_category_scope": {
    "id": [
      "servers"
      ]
    }
}