[Labs-l] Create a new group

Petr Bena benapetr at gmail.com
Tue Apr 10 07:36:40 UTC 2012


No one responded on wiki:

Can you create a new group "System operator" and revoke root access
from all users who aren't members of this group? The group should be
edited only by members of sysadmin group, it should appear just as
other groups (Net admin) etc. petrb 12:08, 3 April 2012 (UTC)

    I discussed on irc with mutante and we decided it would be best if
renamed current sysadmin to project admin and created a sysadmin as
group of people who have root. Just as netadmin is group which control
firewall. petrb 12:45, 3 April 2012 (UTC)

Just to summarize it:

Project admin - can manage instances, and groups
System admin - has root on instances
Net admin - can manage firewall
Members - can access instances but have no root

I think this scheme makes it much easier petrb 12:47, 3 April 2012 (UTC)



More information about the Labs-l mailing list