Red Hat Training

A Red Hat training course is available for Red Hat CloudForms

Appendix A. Default Roles

This section outlines the default roles provided in Red Hat CloudForms and the product features to which they are granted access.

A.1. EvmRole-super_administrator

The EvmRole-super_administrator is granted access to the following product features.

Table A.1. EvmRole-super_administrator

Product Feature

everything

A.2. EvmRole-administrator

The EvmRole-administrator is granted access to the following product features.

Table A.2. EvmRole-administrator

Product Feature

about

all_vm_rules

automation_manager

embedded_automation_manager

availability_zone

host_aggregate

compute

flavor

floating_ip

bottlenecks

chargeback

catalog

cloud_network

cloud_object_store_container

cloud_object_store_object

control_explorer

dashboard

datacenter

storage

storage_pod

ems_cloud

ems_network

ems_cluster

ems_infra

ems_infra_admin_ui

ems_physical_infra

container_dashboard

ems_container

ems_container_deployment

configuration_job

container_project

container_route

container_service

container_replicator

container_group

container

container_node

persistent_volume

container_build

container_image_registry

container_image

container_topology

ems_middleware

middleware_server

middleware_deployment

middleware_datasource

middleware_topology

cloud_topology

infra_topology

host

infra_networking

miq_ae_class_explorer

miq_ae_customization_explorer

miq_ae_class_import_export

miq_ae_class_log

miq_ae_class_simulation

miq_task_all_ui

miq_task_my_ui

my_settings

policy_simulation

policy_log

miq_report

miq_request

miq_template

orchestration_stack

physical_server

physical_infra_topology

planning

policy_import_export

provider_foreman_explorer

pxe

resource_pool

rss

security_group

service

timeline

usage

utilization

vm_explorer

vm

vm_cloud_explorer

vm_infra_explorer

sui_services

sui_notifications

A.3. EvmRole-approver

The EvmRole-approver is granted access to the following product features.

Table A.3. EvmRole-approver

Product Feature

about

all_vm_rules

compute

chargeback

chargeback_reports

customization_template_view

iso_datastore_view

control_explorer

dashboard

ems_cluster_show

ems_cluster_show_list

ems_cluster_perf

ems_cluster_tag

ems_cluster_timeline

ems_infra_show

ems_infra_show_list

ems_infra_tag

ems_infra_timeline

ems_physical_infra_console

ems_physical_infra_tag

ems_physical_infra_view

ems_physical_infra_tag

host_show

host_show_list

host_perf

host_tag

host_timeline

my_settings_default_views

my_settings_time_profiles

my_settings_visuals

miq_report_run

miq_report_saved_reports

miq_report_schedules

miq_report_view

miq_request_control

miq_request_view

miq_task_my_ui

miq_template_check_compliance

miq_template_perf

miq_template_policy_sim

miq_template_show

miq_template_show_list

miq_template_snapshot

miq_template_tag

miq_template_timeline

physical_infra_topology_view

physical_server_view

policy_log

policy_simulation

pxe_image_type_view

pxe_server_view

resource_pool_show

resource_pool_show_list

resource_pool_tag

rss

service_view

storage_show

storage_show_list

storage_pod_show

storage_pod_show_list

storage_perf

storage_tag

timeline

usage

vm_check_compliance

vm_console

vm_webmks_console

vm_cloud_explorer

vm_explorer

vm_infra_explorer

vm_vnc_console

vm_vmrc_console

cockpit_console

vm_perf

vm_policy_sim

vm_show

vm_show_list

vm_snapshot

vm_tag

vm_timeline

vm_chargeback

sui_services_view

sui_vm_details_view

sui_vm_console

sui_vm_web_console

sui_vm_tags

sui_orders_view

sui_notifications

A.4. EvmRole-auditor

The EvmRole-auditor is granted access to the following product features.

Table A.4. EvmRole-auditor

Product Feature

about

automation_manager

embedded_automation_manager

bottlenecks

compute

chargeback

chargeback_reports

customization_template_view

iso_datastore_view

control_explorer

dashboard

ems_cluster_view

ems_cluster_tag

ems_infra_view

ems_infra_tag

ems_infra_check_compliance

ems_physical_infra_console

ems_physical_infra_tag

ems_physical_infra_view

host_show

host_show_list

host_perf

infra_networking_view

infra_networking_tag

instance_view

instance_check_compliance

instance_policy_sim

instance_tag

image_view

image_check_compliance

image_policy_sim

image_tag

iso_datastore_view

host_view

host_check_compliance

host_tag

miq_task_my_ui

my_settings_default_views

my_settings_time_profiles

my_settings_visuals

miq_report_run

miq_report_saved_reports

miq_report_schedules

miq_report_view

miq_template_view

miq_template_check_compliance

miq_template_policy_sim

miq_template_snapshot_view

miq_template_tag

physical_infra_topology_view

physical_server_view

planning

policy_log

policy_profile

policy_simulation

pxe_image_type_view

pxe_server_view

resource_pool_show

resource_pool_show_list

resource_pool_tag

rss

service_view

storage_show

storage_show_list

storage_perf

storage_tag

storage_pod_show

storage_pod_show_list

timeline

usage

utilization

vm_view

vm_check_compliance

vm_compare

vm_console

vm_drift

vm_webmks_console

vm_cloud_explorer

vm_explorer

vm_infra_explorer

vm_vnc_console

vm_vmrc_console

cockpit_console

vm_perf

vm_show

vm_show_list

vm_snapshot_view

vm_tag

vm_timeline

vm_chargeback

sui_services_view

sui_vm_details_view

sui_vm_console

sui_vm_web_console

sui_vm_tags

sui_notifications

A.5. EvmRole-desktop

The EvmRole-desktop is granted access to the following product features.

Table A.5. EvmRole-desktop

Product Feature

about

all_vm_rules

automation_manager

compute

dashboard

ems_physical_infra

miq_request_admin

miq_request_view

miq_template_clone

miq_template_compare

miq_template_drift

miq_template_edit

miq_template_refresh

miq_template_miq_request_new

miq_template_perf

miq_template_publish

miq_template_show

miq_template_show_list

miq_template_timeline

my_settings_default_views

my_settings_time_profiles

my_settings_visuals

physical_server

physical_infra_topology

physical_server_view

provider_foreman_explorer

vm_clone

vm_compare

vm_console

vm_webmks_console

vm_cloud_explorer

vm_explorer

vm_infra_explorer

vm_vnc_console

vm_vmrc_console

cockpit_console

vm_drift

vm_edit

vm_refresh

vm_reset

vm_guest_restart

vm_miq_request_new

vm_perf

vm_publish

vm_show

vm_show_list

vm_guest_shutdown

vm_start

vm_stop

vm_suspend

vm_pause

vm_shelve

vm_shelve_offload

vm_timeline

vm_chargeback

sui_services_view

sui_vm_details_view

sui_vm_console

sui_vm_web_console

sui_vm_start

sui_vm_stop

sui_vm_suspend

sui_orders_view

sui_orders_operations

sui_notifications

A.6. EvmRole-operator

The EvmRole-operator is granted access to the following product features.

Table A.6. EvmRole-operator

Product Feature

about

all_vm_rules

automation_manager

embedded_automation_manager

compute

chargeback

chargeback_reports

dashboard

datastore

ems_cluster_analyze

ems_cluster_compare

ems_cluster_drift

ems_cluster_show

ems_cluster_show_list

ems_cluster_perf

ems_cluster_tag

ems_cluster_timeline

ems_infra_new

ems_infra_delete

ems_infra_discover

ems_infra_edit

ems_infra_refresh

ems_infra_scale

ems_infra_show

ems_infra_show_list

ems_infra_tag

ems_infra_timeline

ems_physical_infra_new

ems_physical_infra_console

ems_physical_infra_delete

ems_physical_infra_discover

ems_physical_infra_edit

ems_physical_infra_refresh

ems_physical_infra_tag

ems_physical_infra_view

physical_server_view

physical_infra_topology_view

host_new

host_analyze

host_compare

host_discover

host_drift

host_edit

host_refresh

host_show

host_show_list

host_perf

host_tag

host_timeline

my_settings_default_views

my_settings_time_profiles

my_settings_visuals

miq_report_run

miq_report_saved_reports

miq_report_schedules

miq_report_view

miq_task_my_ui

miq_template_analyze

miq_template_check_compliance

miq_template_compare

miq_template_drift

miq_template_edit

miq_template_perf

miq_template_refresh

miq_template_show

miq_template_show_list

miq_template_snapshot

miq_template_sync

miq_template_tag

miq_template_timeline

pxe

resource_pool_show

resource_pool_show_list

resource_pool_tag

rss

service_view

provider_foreman_explorer

storage_delete

storage_scan

storage_show

storage_show_list

storage_perf

storage_tag

timeline

usage

vm_analyze

vm_check_compliance

vm_collect_running_processes

vm_compare

vm_console

vm_webmks_console

vm_cloud_explorer

vm_explorer

vm_infra_explorer

vm_vnc_console

vm_vmrc_console

cockpit_console

vm_drift

vm_edit

vm_perf

vm_refresh

vm_reset

vm_guest_restart

vm_show

vm_show_list

vm_guest_shutdown

vm_snapshot

vm_start

vm_stop

vm_suspend

vm_pause

vm_shelve

vm_shelve_offload

vm_sync

vm_tag

vm_timeline

vm_chargeback

sui_services_view

sui_vm_details_view

sui_vm_console

sui_vm_web_console

sui_vm_tags

sui_vm_start

sui_vm_stop

sui_vm_suspend

sui_notifications

A.7. EvmRole-security

The EvmRole-security is granted access to the following product features.

Table A.7. EvmRole-security

Product Feature

about

all_vm_rules

compute

chargeback

chargeback_reports

control_explorer

dashboard

datastore

ems_cluster_show

ems_cluster_show_list

ems_cluster_perf

ems_cluster_tag

ems_cluster_timeline

ems_infra_show

ems_infra_show_list

ems_infra_tag

ems_infra_timeline

ems_physical_infra_tag

ems_physical_infra_view

physical_server_timeline

host_show

host_show_list

host_perf

host_tag

host_timeline

my_settings_default_views

my_settings_time_profiles

my_settings_visuals

miq_report_run

miq_report_saved_reports

miq_report_schedules

miq_report_view

miq_task_my_ui

miq_template_check_compliance

miq_template_compare

miq_template_drift

miq_template_perf

miq_template_policy_sim

miq_template_show

miq_template_show_list

miq_template_snapshot_add

miq_template_snapshot_delete

miq_template_snapshot_delete_all

miq_template_snapshot_revert

miq_template_tag

miq_template_timeline

policy_log

policy_simulation

resource_pool_show

resource_pool_show_list

resource_pool_tag

rss

service_view

storage_show

storage_show_list

storage_perf

storage_tag

timeline

usage

vm_check_compliance

vm_compare

vm_drift

vm_cloud_explorer

vm_explorer

vm_infra_explorer

vm_perf

vm_policy_sim

vm_show

vm_show_list

vm_snapshot_add

vm_snapshot_delete

vm_snapshot_delete_all

vm_snapshot_revert

vm_tag

vm_timeline

vm_chargeback

sui_services_view

sui_vm_details_view

sui_vm_snapshot_create

sui_vm_snapshot_delete

sui_vm_tags

sui_notifications

A.8. EvmRole-support

The EvmRole-support is granted access to the following product features.

Table A.8. EvmRole-support

Product Feature

about

all_vm_rules

compute

chargeback

chargeback_reports

control_explorer

dashboard

datastore

ems_cluster_show

ems_cluster_show_list

ems_cluster_perf

ems_cluster_tag

ems_cluster_timeline

ems_infra_show

ems_infra_show_list

ems_infra_tag

ems_infra_timeline

ems_physical_infra_console

ems_physical_infra_tag

ems_physical_infra_view

host_show

host_show_list

host_perf

host_tag

host_timeline

miq_task_my_ui

my_settings_default_views

my_settings_time_profiles

my_settings_visuals

miq_report_run

miq_report_saved_reports

miq_report_schedules

miq_report_view

miq_template_check_compliance

miq_template_compare

miq_template_drift

miq_template_perf

miq_template_policy_sim

miq_template_show

miq_template_show_list

miq_template_snapshot

miq_template_tag

miq_template_timeline

physical_infra_topology_view

physical_server_view

policy_log

policy_simulation

resource_pool_show

resource_pool_show_list

resource_pool_tag

rss

service_view

storage_show

storage_show_list

storage_perf

storage_tag

timeline

usage

vm_check_compliance

vm_collect_running_processes

vm_console

vm_webmks_console

vm_cloud_explorer

vm_explorer

vm_infra_explorer

vm_vnc_console

vm_vmrc_console

cockpit_console

vm_compare

vm_drift

vm_perf

vm_policy_sim

vm_show

vm_show_list

vm_snapshot

vm_tag

vm_timeline

vm_chargeback

sui_services_view

sui_vm_details_view

sui_vm_console

sui_vm_web_console

sui_vm_tags

sui_notifications

A.9. EvmRole-user

The EvmRole-user is granted access to the following product features.

Table A.9. EvmRole-user

Product Feature

about

all_vm_rules

compute

chargeback

chargeback_reports

dashboard

datastore

ems_cluster_show

ems_cluster_show_list

ems_cluster_perf

ems_cluster_tag

ems_cluster_timeline

ems_infra_show

ems_infra_show_list

ems_infra_tag

ems_infra_timeline

ems_physical_infra_console

ems_physical_infra_show

ems_physical_infra_show_list

ems_physical_infra_tag

ems_physical_infra_timeline

host_show

host_show_list

host_perf

host_tag

host_timeline

miq_task_my_ui

my_settings_default_views

my_settings_time_profiles

my_settings_visuals

miq_report_run

miq_report_saved_reports

miq_report_schedules

miq_report_view

miq_request_admin

miq_request_view

miq_template_check_compliance

miq_template_compare

miq_template_drift

miq_template_perf

miq_template_show

miq_template_show_list

miq_template_snapshot

miq_template_tag

miq_template_timeline

physical_infra_topology_view

physical_server_view

resource_pool_show

resource_pool_show_list

resource_pool_tag

rss

service_view

storage_show

storage_show_list

storage_perf

storage_tag

timeline

usage

vm_check_compliance

vm_console

vm_webmks_console

vm_cloud_explorer

vm_explorer

vm_infra_explorer

vm_vnc_console

vm_vmrc_console

cockpit_console

vm_compare

vm_drift

vm_perf

vm_show

vm_show_list

vm_snapshot

vm_tag

vm_timeline

vm_chargeback

sui_services_view

sui_vm_details_view

sui_vm_console

sui_vm_web_console

sui_vm_tags

sui_orders_view

sui_orders_operations

sui_notifications

A.10. EvmRole-user_limited_self_service

The EvmRole-user_limited_self_service is granted access to the following product features.

Table A.10. EvmRole-user_limited_self_service

Product Feature

about

all_vm_rules

catalog_items_view

compute

miq_request_admin

miq_request_view

my_settings_default_views

my_settings_visuals

service_edit

service_delete

service_reconfigure

service_tag

service_retire_now

service_view

svc_catalog_provision

vm_clone

vm_cloud_explorer

vm_filter_accord

vm_guest_restart

vm_guest_shutdown

vm_infra_explorer

vm_miq_request_new

vm_publish

vm_reset

vm_retire_now

vm_show

vm_show_list

vm_snapshot_view

vm_start

vm_stop

vm_suspend

vm_pause

vm_shelve

vm_shelve_offload

vm_tag

sui_core

sui_services

sui_vm

sui_orders

sui_svc_catalog_view

sui_svc_catalog_cart

sui_cart

A.11. EvmRole-user_self_service

The EvmRole-user_self_service is granted access to the following product features.

Table A.11. EvmRole-user_self_service

Product Feature

about

all_vm_rules

automation_manager

embedded_automation_manager

ems_physical_infra_console

catalog_items_view

compute

miq_template_clone

miq_template_drift

miq_template_edit

miq_template_perf

miq_template_refresh

miq_template_show

miq_template_show_list

miq_template_snapshot

miq_template_sync

miq_template_tag

miq_template_timeline

my_settings_default_views

my_settings_visuals

miq_request_admin

miq_request_view

provider_foreman_explorer

service_edit

service_delete

service_reconfigure

service_tag

service_retire_now

service_view

svc_catalog_provision

vm_console

vm_webmks_console

vm_clone

vm_cloud_explorer

vm_console

vm_webmks_console

vm_drift

vm_edit

vm_filter_accord

vm_guest_restart

vm_guest_shutdown

vm_infra_explorer

vm_miq_request_new

vm_perf

vm_publish

vm_refresh

vm_reset

vm_retire_now

vm_show

vm_show_list

vm_snapshot

vm_start

vm_stop

vm_suspend

vm_pause

vm_shelve

vm_shelve_offload

vm_sync

vm_tag

vm_timeline

vm_chargeback

vm_vmrc_console

vm_vnc_console

cockpit_console

sui

A.12. EvmRole-vm_user

The EvmRole-vm_user is granted access to the following product features.

Table A.12. EvmRole-vm_user

Product Feature

about

all_vm_rules

automation_manager

embedded_automation_manager

compute

miq_request_admin

miq_request_view

miq_template_analyze

miq_template_check_compliance

miq_template_clone

miq_template_drift

miq_template_edit

miq_template_perf

miq_template_show

miq_template_show_list

miq_template_snapshot

miq_template_sync

miq_template_tag

miq_template_timeline

my_settings_default_views

my_settings_visuals

provider_foreman_explorer

vm_analyze

vm_check_compliance

vm_clone

vm_cloud_explorer

vm_collect_running_processes

vm_compare

vm_console

vm_webmks_console

vm_drift

vm_explorer

vm_guest_restart

vm_guest_shutdown

vm_infra_explorer

vm_miq_request_new

vm_perf

vm_policy_sim

vm_publish

vm_refresh

vm_reset

vm_retire_now

vm_show

vm_show_list

vm_snapshot

vm_start

vm_stop

vm_suspend

vm_pause

vm_shelve

vm_shelve_offload

vm_sync

vm_tag

vm_timeline

vm_chargeback

vm_vmrc_console

vm_vnc_console

cockpit_console

sui_vm_details_view

sui_vm_console

sui_vm_web_console

sui_vm_tags

sui_vm_retire

sui_vm_start

sui_vm_stop

sui_vm_suspend

sui_orders_view

sui_orders_operations

sui_notifications

A.13. EvmRole-tenant_administrator

The EvmRole-tenant_administrator is granted access to the following product features.

Table A.13. EvmRole-tenant_administrator

Product Feature

about

automation_manager

embedded_automation_manager

availability_zone

host_aggregate

all_vm_rules

compute

cloud_network

cloud_subnet

flavor

floating_ip

bottlenecks

chargeback

catalog

cloud_tenant

control_explorer

dashboard

datacenter

storage

ems_cloud

ems_network

ems_cluster

ems_infra

ems_physical_infra

host

load_balancer

miq_ae_class_explorer

miq_ae_customization_explorer

miq_ae_class_import_export

miq_ae_class_log

miq_ae_class_simulation

miq_task_all_ui

miq_task_my_ui

my_settings

network_port

network_router

policy_simulation

policy_log

miq_report

miq_request

miq_template

orchestration_stack

planning

policy_import_export

provider_foreman_explorer

pxe

rbac_group

rbac_role_view

rbac_tenant

rbac_user

resource_pool

rss

security_group

service

timeline

usage

utilization

vm_explorer

vm

vm_cloud_explorer

vm_infra_explorer

sui_services

sui_notifications

A.14. EvmRole-tenant_quota_administrator

The EvmRole-tenant_quota_administrator is granted access to the following product features.

Table A.14. EvmRole-tenant_quota_administrator

Product Feature

about

automation_manager

embedded_automation_manager

availability_zone

host_aggregate

all_vm_rules

flavor

bottlenecks

compute

chargeback

catalog

cloud_tenant

control_explorer

dashboard

datacenter

storage

ems_cloud

ems_cluster

ems_infra

ems_physical_infra

host

miq_ae_class_explorer

miq_ae_customization_explorer

miq_ae_class_import_export

miq_ae_class_log

miq_ae_class_simulation

miq_task_all_ui

miq_task_my_ui

my_settings

policy_simulation

policy_log

miq_report

miq_request

miq_template

orchestration_stack

planning

policy_import_export

provider_foreman_explorer

pxe

rbac_tenant_view

rbac_tenant_manage_quotas

resource_pool

rss

security_group

service

timeline

usage

utilization

vm_explorer

vm

vm_cloud_explorer

vm_infra_explorer

sui_services

sui_notifications

A.15. EvmRole-consumption_administrator

The EvmRole-consumption_administrator is granted access to the following product features.

Table A.15. EvmRole-consumption_administrator

Product Feature

dashboard

chargeback

miq_report

A.16. EvmRole-container_administrator

The EvmRole-container_administrator is granted access to the following product features.

Table A.16. EvmRole-container_administrator

Product Feature

vms_filter_accord

instances_filter_accord

datacenter_controller

storage

storage_pod

dashboard

miq_report

consumption

chargeback

pictures

control_explorer

generic_object

generic_object_definition

my_settings

tasks

about

ems_container

middleware_server_group

container_group

container_node

container_replicator

container_image

container_image_registry

persistent_volume

container_build

container_template

container_service

container_route

container_project

container

container_topology

container_dashboard

ems_infra_dashboard

instance_view

vm_view

miq_cloud_networks

miq_arbitration_settings

miq_arbitration_rules

redhat_access_insights_admin

ems_container_ad_hoc_metrics

monitor

monitor_alerts

alert_status

alert_action

ems_infra

rbac_user

ops_settings

A.17. EvmRole-container_operator

The EvmRole-container_operator is granted access to the following product features.

Table A.17. EvmRole-container_operator

Product Feature

vms_filter_accord

instances_filter_accord

dashboard_view

miq_report_saved_reports_view

miq_report_view

miq_report_control

chargeback_reports

my_settings

tasks

ems_container_view

ems_container_check_compliance

container_group_view

container_group_check_compliance

container_node_view

container_node_check_compliance

container_replicator_check_compliance

container_image_view

container_image_scan

container_image_check_compliance

container_image_registry_view

persistent_volume_view

container_build_view

container_template_view

container_service_view

container_route_view

container_project_view

container_filter_accord

container_view

container_control

container_topology

container_dashboard

instance_view

vm_view

ems_container_ad_hoc_metrics

monitor

monitor_alerts

alert_status

alert_action

ems_infra

rbac_user

ops_settings

A.18. EvmRole-reader

The EvmRole-reader is granted access to the following product features.

Table A.18. EvmRole-reader

Product Feature

auth_key_pair_cloud_view

automation_manager_configuration_script_view

automation_manager_configured_system_view

automation_manager_providers_view

availability_zone_view

bottlenecks

catalog_items_view

cloud_network_view

cloudobject_store_container_view

cloud_object_store_object_view

cloud_subnet_view

cloud_tenant_view

cloud_topology

cloud_volume_backup_view

cloud_volume_snapshot_view

cloud_volume_view

configuration_job_view

configuration_script_view

configured_systems_filter_accord_view

container_build_view

container_dashboard

container_filter_accord

container_group_view

container_image_registry_view

container_image_view

container_node_view

container_project_view

container_replicator_view

container_route_view

container_service_view

container_template_view

container_topology

container_view

customization_template_view

dashboard_view

embedded_automation_manager_credentials_view

embedded_configuration_script_payload_view

embedded_configuration_script_source_view

ems_block_storage_view

ems_cloud_view

ems_cluster_view

ems_container_view

ems_infra_view

ems_physical_infra_view

ems_middleware_view

ems_network_view

ems_object_storage_view

flavor_view

floating_ip_view

host_aggregate_view

host_view

image_view

infra_networking_view

infra_topology

instance_view

iso_datastore_view

load_balancer_view

middleware_datasource_view

middleware_deployment_view

middleware_domain_view

middleware_messaging_view

middleware_server_view

middleware_topology

miq_ae_class_log

miq_ae_domain_view

miq_report_saved_reports_view

miq_report_schedule_view

miq_report_view

miq_request_view

miq_template_snapshot_view

miq_template_view

my_settings

network_port_view

network_router_view

network_topology

orchestration_stack_view

orchestration_templates_view

persistent_volume_view

physical_infra_topology_view

physical_server_view

planning

policy_log

provider_foreman_view

pxe_image_type_view

pxe_server_view

rbac_group_view

rbac_role_view

rbac_tenant_view

rbac_user_view

redhat_access_insights_overview

resource_pool_view

rss

security_group_view

service_view

st_catalog_view

storage_view

tasks

timeline

utilization

virtual_template_show

vm_cloud_explorer

vm_explorer

vm_infra_explorer

vm_snapshot_view

vm_view

sui_services_view

sui_orders_view

sui_notifications