Skip to main content
Version: 0.0.6 (latest)

7. Delegate Volume and Group Management Roles

Role Comparison​

volumegroup_manager — requires a VolumeGroup scope​

  • Create, edit, and delete volumes
  • Manage VolumeGroups
  • Create, edit, and delete Access Policies
  • Create and restore snapshots
  • Mount volumes with mass-ctl

usergroup_manager — requires a UserGroup scope​

  • Add and remove users from the assigned UserGroup
  • View group membership
  • No direct access to volume data
Assigning both roles

Assigning both roles to one person lets them handle both volume management and group membership. Roles can also be split across two different people.

Steps​

  1. Go to Access Rules → Roles tab
  2. volumegroup_manager row → Assign User → select the person → specify VolumeGroup scope → save
  3. usergroup_manager row → Assign User → same person → specify UserGroup scope → save

Access Rules — full view