From 2bfaeb9983a0d5f8332fa31465641245d36bbd8e Mon Sep 17 00:00:00 2001 From: Abhishek Kumar Date: Thu, 6 Jun 2024 17:43:04 +0530 Subject: [PATCH 1/2] project: note on project roles Addresses https://github.com/apache/cloudstack/issues/9071 Signed-off-by: Abhishek Kumar --- source/adminguide/projects.rst | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/source/adminguide/projects.rst b/source/adminguide/projects.rst index 791ad89dd4..5ce24f24ea 100644 --- a/source/adminguide/projects.rst +++ b/source/adminguide/projects.rst @@ -288,6 +288,16 @@ to add members in CloudStack, but only one way is enabled at a time: the UI. +Working with Project Roles +-------------------------- +CloudStack allows adding project members with a desired project role. A +project role will be assigned to the member in addition to their base +account role. Project Roles are retrictive in nature and can be used to +further restrict certain API access to the members within the project. +Project roles can be created or managed using `Project roles` tab in the +project details UI. + + Sending Project Membership Invitations ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From 9f5a8e2bb34036083109ce95f9eac974ab1cd457 Mon Sep 17 00:00:00 2001 From: Abhishek Kumar Date: Fri, 7 Jun 2024 11:34:26 +0530 Subject: [PATCH 2/2] changes from review Co-authored-by: Vishesh --- source/adminguide/projects.rst | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/source/adminguide/projects.rst b/source/adminguide/projects.rst index 5ce24f24ea..14fa8dc0db 100644 --- a/source/adminguide/projects.rst +++ b/source/adminguide/projects.rst @@ -294,8 +294,9 @@ CloudStack allows adding project members with a desired project role. A project role will be assigned to the member in addition to their base account role. Project Roles are retrictive in nature and can be used to further restrict certain API access to the members within the project. -Project roles can be created or managed using `Project roles` tab in the -project details UI. +It is important to note that a project role cannot be used to elevate an +existing user's permissions. Project roles can be created or managed +using `Project roles` tab in the project details UI. Sending Project Membership Invitations