Answers: <p>Openstack permissions are not super fun to play around. There are a default set that limits what member/user can do.</p>
  <p>Cloud operators are free to customize roles for each Openstack component. Only the operator can tell you if there are custom roles.</p>
  
Answers: CC BY-SA 4.0
Answers: 2022-02-23T02:07:58.180Z
Answers: 2022-02-23T02:07:58.180Z
Answers: LaurentDumont
Answers: <p>IIRC tenants usually don't have privileges to see actual policy definitions, but depending on your configuration you should be able to see some info with <code>openstack quota</code></p>
  <p><a href="https://docs.openstack.org/python-openstackclient/xena/cli/command-objects/quota.html" rel="nofollow noreferrer">Reference doc</a></p>
  
Answers: CC BY-SA 4.0
Answers: 2022-02-13T20:34:23.543Z
Answers: 2022-02-13T20:34:23.543Z
Answers: Nathan Curry
Body: <p>In a <a href="https://devops.stackexchange.com/questions/15349/how-can-i-deploy-a-kubernetes-cluster-onto-openstack-with-terraform?noredirect=1#comment16432_15349">comment on the site</a> someone has asked me,</p>
  <blockquote>
  <p>Can you give more info on what kind of permissions [on OpenStack] are we talking about?</p>
  </blockquote>
  <p>I want to answer that question, but I don't know how. Given credentials to Horizon (OpenStack Dashboard) is there a method to tell what my user can and can't do? When I go to the <code>project/api_access/</code> I can see only the endpoints I have access to, but not the level of access on each end-point?</p>
  
Tags: <openstack>
Title: Is there a way for a user to audit their permission levels in OpenStack?
UserDisplayName: Evan Carroll
ThreadText: # Is there a way for a user to audit their permission levels in OpenStack?
  
  (Asked by: username_0 on 2022-02-07)
  
  In a [comment on the site](https://devops.stackexchange.com/questions/15349/how-can-i-deploy-a-kubernetes-cluster-onto-openstack-with-terraform?noredirect=1#comment16432_15349) someone has asked me,
  
  > Can you give more info on what kind of permissions [on OpenStack] are we talking about?
  
  I want to answer that question, but I don't know how. Given credentials to Horizon (OpenStack Dashboard) is there a method to tell what my user can and can't do? When I go to the `project/api_access/` I can see only the endpoints I have access to, but not the level of access on each end-point?
  
  **Tags:** openstack
  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_1 on 2022-02-23. Score: 1 | Accepted answer
  
  Openstack permissions are not super fun to play around. There are a default set that limits what member/user can do.
  
  Cloud operators are free to customize roles for each Openstack component. Only the operator can tell you if there are custom roles.
  
  
  ---
  
  ### Answer by username_2 on 2022-02-13. Score: 1
  
  IIRC tenants usually don't have privileges to see actual policy definitions, but depending on your configuration you should be able to see some info with `openstack quota`
  
  [Reference doc](https://docs.openstack.org/python-openstackclient/xena/cli/command-objects/quota.html)
  
  
  ---
  
  