# default rules
# https://docs.openstack.org/nova/ussuri/configuration/policy.html

context_is_tenantLead: role:tenantLead

os_compute_api:os-admin-actions:reset_state: rule:context_is_tenantLead or rule:system_admin_api
os_compute_api:os-aggregates:index: rule:context_is_tenantLead or rule:system_reader_api
os_compute_api:os-aggregates:show: rule:context_is_tenantLead or rule:system_reader_api
os_compute_api:os-availability-zone:detail: rule:context_is_tenantLead or rule:system_reader_api
os_compute_api:os-extended-server-attributes: rule:context_is_tenantLead or rule:system_admin_api
os_compute_api:os-hosts: rule:context_is_tenantLead or rule:admin_api
os_compute_api:os-hypervisors:servers: rule:context_is_tenantLead or rule:system_reader_api
os_compute_api:os-hypervisors:list-detail: rule:context_is_tenantLead or rule:system_reader_api
os_compute_api:os-migrate-server:migrate: rule:context_is_tenantLead or rule:system_admin_api
os_compute_api:os-migrate-server:migrate_live: rule:context_is_tenantLead or rule:system_admin_api