https://cwiki.apache.org/confluence/display/CLOUDSTACK/Ability+to+control+the+external+id+of+first+class+objects
I'm trying to understand why this is admin only, given that it verifies that the UUID is unique for the resource it seems it would be safe to allow any user to supply their preferred UUID.