Permissions Matrix for Cloud Databases


The following permissions matrix displays specific permissions for the roles in Cloud Databases. The matrix displays the method names, their corresponding RESTful API commands, and the roles that are supported.

API Documentation

Related Knowledge Center Articles

Cloud Databases Terminology

As of March 31, 2014

CAPABILITY ROLE DESCRIPTION 
Method Name API Action Observer Creator Admin  

VERSIONS

List Versions GET / Lists information about all versions of the API.
List Version Details GET /{version} Returns detailed information about the specified version of the API.

DATABASE INSTANCES

Create Database Instance POST /instances   Creates a new database instance.
List All Database Instances GET /instances Lists the status and information for all database instances.
Update Database Instance PUT /instances/{instancesId}    Associates a specified database instance with a configuration group
List Database Instance Status and Details GET /instances/{instanceId} Lists status and details for a specified database instance.
Delete Database Instance DELETE /instances/{instanceId}     Deletes the specified database instance.
Get Default Configuration GET /instances/{instanceId}/configuration

List the defaultMySQL configuration settings from the template that were applied to the specified instance.

Enable Root User POST /instances/{instanceId}/root     Enables the root user for the specified database instance and returns the root password.
List Root-Enabled Status GET /instances/{instanceId}/root Returns true if root user is enabled for the specified database instance or false otherwise.

DATABASE INSTANCE ACTIONS

Restart Instance POST /instances/{instanceId}/action     Restarts the database service on the instance.
Resize the Instance POST /instances/{instanceId}/action     Resizes the memory of the instance.
Resize the Instance Volume POST /instances/{instanceId}/action     Resizes the volume attached to the Instance.

DATABASES

Create Database POST /instances/{instanceId}/databases   Creates a new database within the specified instance.
List Databases for Instance GET /instances/{instanceId}/databases Lists databases for the specified instance.
Delete Database DELETE /instances/{instanceId}/databases/{databaseName}     Deletes the specified database.

USERS

Create User POST /instances/{instanceId}/users   Creates a user for the specified database instance.
List Users in Database Instance GET /instances/{instanceId}/users Lists the users in the specified database instance.
List User GET /instances/{instanceId}/users/{name} Shows a list of all databases a user has access to.
List User Access GET /instances/{instanceId}/users/{name}/databases Lists user access for a specified database instance.
Grant User Access PUT /instances/{instanceId}/users/{name}/databases   Grants access for the specified user to one or more databases for the specified instance.
Delete User Access DELETE /instances/{instanceId}/users/{name}/databases/{database}     Removes access to the specified database for the specified user.
Delete User DELETE /instances/{instanceId}/users/{name}     Deletes the user identified by {name} for the specified database instance.
Change User(s) Password PUT /instances/{instanceId}/users     Changes user password for the specified database instance.
Modify User Attributes PUT /instances/{instanceId}/users/{name}     Modifies one or more of the following for the specified user: name, password, and host from which the user is allowed to connect to the database.

FLAVORS

List Flavors GET /flavors Lists information for all available flavors.
List Flavors by ID GET /flavors/{flavorId} Lists all flavor information about the specified flavor ID.

*BACKUPS (Available only with the API)

Create Backup POST /backups   Creates a new backup for a database instance.
Delete Backup DELETE /backups/{backupId}     Deletes the specified backup.
List Backups GET /backups Lists all backups for all database instances.
List Backup by ID GET /backups/{backupId}     Lists details about a specified backup.
List Backups for Instance GET /instance/{instanceId}/backups     Lists all backups for a specified instance.
Restore Backup POST /instances   Creates a new database instance from a backup.

CONFIGURATIONS

List Configurations GET /configurations Lists all defined configuration groups for the tenant.
Create Configuration POST /configurations   Creates new configuration group based on the parameters supplied in the request body.
List Configuration Details GET / configurations/{configId} Lists details for specified configuration group.
Update Some Configuration Parameters PATCH / configurations/{configId}   Updates some of the configuration parameters associated with the specified configuration group.
Replace All Configuration Parameters PUT /configurations/{configId}   Replaces all the configuration parameters associated with the specified configuration group.
Delete Configuration Group DELETE /configurations/{configId}   Deletes the specified configuration group. No message body is expected in the request.
List Instances for Configuration GET / configurations/{configId}/instances Lists instances that are associated with the specified configuration group.

CONFIGURATIONS

Configuration Parameters

List Configuration Parameters GET /datastores/{datastoreId}/versions/{versionId}/parameters Lists configuration parameters that may be configured on the system.
List Configuration Parameter Details  GET /datastores/{datastoreId}/versions/{versionId}/parameters/{parameterId} Lists the details of a specified configuration parameter that may be configured on the system.
List Configuration Parameters Without Datastore GET /datastores/versions/{versionId}/parameters Lists the configuration parameters that may be configured on the system without specifying a datastore.
List Configuration Parameter Details Without Datastore  GET /datastores/versions/{versionId}/parameters/{parameterId} Lists the details of a specified configuration parameter that may be configured on the system without specifying a datastore.

DATASTORE TYPES AND VERSIONS

List All Datastore Types GET /datastores Lists all datastore types.
List All Datastore Types for Datastore GET /datastores/{datastoreId} Lists all datastore types for the specified datastore.
List All Datastore Versions for Datastore GET /datastores/{datastoreId}/versions Lists all datastore versions for the specified datastore.
List Datastore Version for Specified Version GET /datastores/{datastoreId}/versions/{versionId} Lists the datastore version for the specified version.

 

Cloud Databases Terminology

Database

A MySQL database within a database instance.

Database Instance

An isolated MySQL instance in a single tenant environment on a shared host machine. 

Flavor

An available hardware configuration for a database instance. Each flavor has a unique combination of memeory capacity and priority for CPU time.

Volume

A user-specified storage that contains the MySQL data directory. Volumes are automatically provisioned on shared Interent Small Computers System Interface (iSCSI) storage area networks (SAN) that provide for increased performance, scalability, availability, and manageability. 

 

< Permission Matrices for RBAC

 



Was this content helpful?




© 2011-2013 Rackspace US, Inc.

Except where otherwise noted, content on this site is licensed under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License


See license specifics and DISCLAIMER