# Role Based Privileges

Refer to the table below for a detailed breakdown of each task that can be done by a self-service user and an administrator.

| Task                                                    | Role              |                                              |
| ------------------------------------------------------- | ----------------- | -------------------------------------------- |
|                                                         | **Administrator** | **Self-service User**                        |
| **Infrastructure Management**                           |                   |                                              |
| Add Host                                                | `Accessible`      | `Not Accessible`                             |
| Configure Host                                          | `Accessible`      | `Not Accessible`                             |
| Deauthorize Host                                        | `Accessible`      | `Not Accessible`                             |
| Create Host Aggregate                                   | `Accessible`      | `Not Accessible`                             |
| Delete Host Aggregate                                   | `Accessible`      | `Not Accessible`                             |
| **User Management**                                     |                   |                                              |
| Create user                                             | `Accessible`      | `Not Accessible`                             |
| Edit user                                               | `Accessible`      | `Not Accessible`                             |
| Delete user                                             | `Accessible`      | `Not Accessible`                             |
| Edit Quota                                              | `Accessible`      | `Not Accessible`                             |
| Manage multi-factor authentication                      | `Accessible`      | `Not Accessible`                             |
| **Tenant Management**                                   |                   |                                              |
| Create Tenant                                           | `Accessible`      | `Not Accessible`                             |
| Edit Tenant                                             | `Accessible`      | `Not Accessible`                             |
| Delete Tenant                                           | `Accessible`      | `Not Accessible`                             |
| **Network Management**                                  |                   |                                              |
| Create provider network                                 | `Accessible`      | `Not Accessible`                             |
| Edit provider network                                   | `Accessible`      | `Not Accessible`                             |
| Delete provider network                                 | `Accessible`      | `Not Accessible`                             |
| Create external network                                 | `Accessible`      | `Not Accessible`                             |
| Edit external network                                   | `Accessible`      | `Not Accessible`                             |
| Delete external network                                 | `Accessible`      | `Not Accessible`                             |
| Create tenant network                                   | `Accessible`      | `Accessible`                                 |
| Edit tenant network                                     | `Accessible`      | `Accessible`                                 |
| Delete tenant network                                   | `Accessible`      | `Accessible`                                 |
| Create router                                           | `Accessible`      | `Accessible`                                 |
| Edit router                                             | `Accessible`      | `Accessible`                                 |
| Delete router                                           | `Accessible`      | `Accessible`                                 |
| Create security group                                   | `Accessible`      | `Accessible`                                 |
| Edit security group                                     | `Accessible`      | `Accessible`                                 |
| Delete security group                                   | `Accessible`      | `Accessible`                                 |
| Assign floating IP address                              | `Accessible`      | `Accessible`                                 |
| Remove floating IP address                              | `Accessible`      | `Accessible`                                 |
| Delete floating IP address                              | `Accessible`      | `Accessible`                                 |
| Configure networking                                    | `Accessible`      | `Accessible`                                 |
| **Block Storage Management**                            |                   |                                              |
| Create volume                                           | `Accessible`      | `Accessible`                                 |
| Edit volume                                             | `Accessible`      | `Accessible`                                 |
| Attach volume                                           | `Accessible`      | `Accessible`                                 |
| Detach volume                                           | `Accessible`      | `Accessible`                                 |
| Take volume snapshot                                    | `Accessible`      | `Accessible`                                 |
| Edit volume snapshot                                    | `Accessible`      | `Accessible`                                 |
| Delete volume snapshot                                  | `Accessible`      | `Accessible`                                 |
| Upload volume as image                                  | `Accessible`      | `Accessible`                                 |
| Delete volume                                           | `Accessible`      | `Accessible`                                 |
| Create volume type                                      | `Accessible`      | `Not Accessible`                             |
| **Image Management**                                    |                   |                                              |
| Add image                                               | `Accessible`      | `Not Accessible`                             |
| Edit image                                              | `Accessible`      | Partial. Can edit name and description only. |
| Delete image                                            | `Accessible`      | `Not Accessible`                             |
| Add bulk metadata to image                              | `Accessible`      | `Accessible`                                 |
| Remove bulk metadata from image                         | `Accessible`      | `Accessible`                                 |
| **Instance Management**                                 |                   |                                              |
| Create instance                                         | `Accessible`      | `Accessible`                                 |
| Edit instance                                           | `Accessible`      | `Accessible`                                 |
| Delete instance                                         | `Accessible`      | `Accessible`                                 |
| Take snapshot of instance                               | `Accessible`      | `Accessible`                                 |
| Start instance                                          | `Accessible`      | `Accessible`                                 |
| Stop instance                                           | `Accessible`      | `Accessible`                                 |
| Suspend instance                                        | `Accessible`      | `Accessible`                                 |
| Resume instance                                         | `Accessible`      | `Accessible`                                 |
| Reboot instance                                         | `Accessible`      | `Accessible`                                 |
| Rename instance                                         | `Accessible`      | `Accessible`                                 |
| Add metadata for instance                               | `Accessible`      | `Accessible`                                 |
| Edit metadata for instance                              | `Accessible`      | `Accessible`                                 |
| Delete metadata for instance                            | `Accessible`      | `Accessible`                                 |
| Assign floating IP to instance                          | `Accessible`      | `Accessible`                                 |
| Remove floating IP assigned to instance                 | `Accessible`      | `Accessible`                                 |
| Add fixed IP to instance                                | `Accessible`      | `Accessible`                                 |
| Remove fixed IP assigned to instance                    | `Accessible`      | `Accessible`                                 |
| **Security Management**                                 |                   |                                              |
| Import SSH key-pair                                     | `Accessible`      | `Accessible`                                 |
| Delete SSH key-pair                                     | `Accessible`      | `Accessible`                                 |
| View environment variables for access through API calls | `Accessible`      | `Accessible`                                 |
| **Application Management**                              |                   |                                              |
| Create application                                      | `Accessible`      | `Accessible`                                 |
| Deploy application                                      | `Accessible`      | `Accessible`                                 |
| Edit application                                        | `Accessible`      | `Accessible`                                 |
| Delete application                                      | `Accessible`      | `Accessible`                                 |
| Download application package                            | `Accessible`      | `Accessible`                                 |
| View application details                                | `Accessible`      | `Accessible`                                 |
| Import pre-built application to application catalog     | `Accessible`      | `Accessible`                                 |
| Create environment                                      | `Accessible`      | `Accessible`                                 |
| Add application to environment                          | `Accessible`      | `Accessible`                                 |
| Delete environment                                      | `Accessible`      | `Accessible`                                 |
| **Orchestration**                                       |                   |                                              |
| Launch stack                                            | `Accessible`      | `Accessible`                                 |
| Delete stack                                            | `Accessible`      | `Not Accessible`                             |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.platform9.com/managed-openstack/5.8/user-administration/user-admin-role-based-privileges.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.