Bug 1283274 - Tenant administrator has no rights to create new Cloud instances
Tenant administrator has no rights to create new Cloud instances
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: UI - OPS (Show other bugs)
Unspecified Unspecified
medium Severity medium
: GA
: 5.6.0
Assigned To: Zita Nemeckova
Pavol Kotvan
Depends On:
  Show dependency treegraph
Reported: 2015-11-18 10:13 EST by Pavol Kotvan
Modified: 2016-06-29 11:09 EDT (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2016-06-29 11:09:35 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: Bug
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2016:1348 normal SHIPPED_LIVE CFME 5.6.0 bug fixes and enhancement update 2016-06-29 14:50:04 EDT

  None (edit)
Description Pavol Kotvan 2015-11-18 10:13:06 EST
Description of problem:
When tenant admin would like to add new Cloud instance, he cannot see Lifecycle button and therefore he is not able provision new instances.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. Create new tenant
2. Create new group, assign tenant and EvmRole-tenant_administrator role to it
3. Create new tenant admin user and assign group created in previous step to this user
4. Login as tenant admin
5. Go to Cloud -> Instances

Actual results:
Tenant administrator has no rights to create new Cloud instances. There is Lifecycle button missing.

Expected results:
Tenant admin is able to create new instances.

Additional info:
This was tested with RHOS7-GA and Amazon providers. Superadmin can add new instances.
Comment 3 Harpreet Kataria 2016-05-04 10:40:52 EDT

all_vm_rules is missing from OOTB tenant admin roles EvmRole-tenant_administrator, EvmRole-tenant_quota_administrator in db/fixtures/miq_user_roles.yml 
Above mentioned both roles already have access to VM* explorers.
Let me know if you have questions.

Comment 5 CFME Bot 2016-05-06 18:05:46 EDT
New commit detected on ManageIQ/manageiq/master:

commit 92f7235d2b21d83f33a905d81c91e634ca514795
Author:     Zita Nemeckova <znemecko@redhat.com>
AuthorDate: Thu May 5 14:09:31 2016 +0200
Commit:     Zita Nemeckova <znemecko@redhat.com>
CommitDate: Thu May 5 14:09:31 2016 +0200

    Add rights to tenant administrator to create new Cloud instance

 db/fixtures/miq_user_roles.yml | 2 ++
 1 file changed, 2 insertions(+)
Comment 9 errata-xmlrpc 2016-06-29 11:09:35 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.