<p>Openstack permissions are not super fun to play around. There are a default set that limits what member/user can do.</p>
<p>Cloud operators are free to customize roles for each Openstack component. Only the operator can tell you if there are custom roles.</p>

CC BY-SA 4.0
2022-02-23T02:07:58.180Z
2022-02-23T02:07:58.180Z
LaurentDumont
<p>IIRC tenants usually don't have privileges to see actual policy definitions, but depending on your configuration you should be able to see some info with <code>openstack quota</code></p>
<p><a href="https://docs.openstack.org/python-openstackclient/xena/cli/command-objects/quota.html" rel="nofollow noreferrer">Reference doc</a></p>

CC BY-SA 4.0
2022-02-13T20:34:23.543Z
2022-02-13T20:34:23.543Z
Nathan Curry
<p>In a <a href="https://devops.stackexchange.com/questions/15349/how-can-i-deploy-a-kubernetes-cluster-onto-openstack-with-terraform?noredirect=1#comment16432_15349">comment on the site</a> someone has asked me,</p>
<blockquote>
<p>Can you give more info on what kind of permissions [on OpenStack] are we talking about?</p>
</blockquote>
<p>I want to answer that question, but I don't know how. Given credentials to Horizon (OpenStack Dashboard) is there a method to tell what my user can and can't do? When I go to the <code>project/api_access/</code> I can see only the endpoints I have access to, but not the level of access on each end-point?</p>

<openstack>
Is there a way for a user to audit their permission levels in OpenStack?
Evan Carroll
# Is there a way for a user to audit their permission levels in OpenStack?

(Asked by: username_0 on 2022-02-07)

In a [comment on the site](https://devops.stackexchange.com/questions/15349/how-can-i-deploy-a-kubernetes-cluster-onto-openstack-with-terraform?noredirect=1#comment16432_15349) someone has asked me,

> Can you give more info on what kind of permissions [on OpenStack] are we talking about?

I want to answer that question, but I don't know how. Given credentials to Horizon (OpenStack Dashboard) is there a method to tell what my user can and can't do? When I go to the `project/api_access/` I can see only the endpoints I have access to, but not the level of access on each end-point?

**Tags:** openstack


---

## 2 answers

### Answer by username_1 on 2022-02-23. Score: 1 | Accepted answer

Openstack permissions are not super fun to play around. There are a default set that limits what member/user can do.

Cloud operators are free to customize roles for each Openstack component. Only the operator can tell you if there are custom roles.


---

### Answer by username_2 on 2022-02-13. Score: 1

IIRC tenants usually don't have privileges to see actual policy definitions, but depending on your configuration you should be able to see some info with `openstack quota`

[Reference doc](https://docs.openstack.org/python-openstackclient/xena/cli/command-objects/quota.html)


---

