David, The '=15's mean user is allowed, as 15 = 8+4=2=1 (it is a decimal description of a bit-field) Have you created any roles along the way?
On Mon, Oct 4, 2021 at 4:51 PM David Larsen <[email protected]> wrote: > Hi > > I have tried to migrate our Cloudstack (4.15) to use dynamic roles. The > migrate process went ok, but users can't log in afterwards...(?). > When they log in, the only response they get is "discovering..." > I had to go back to commands.properties. > > What are the default user roles when using dynamic roles? > > Which roles are migrated from commands.properties when using > migrate-dynamicroles.py? > > I have never changed anything in the commands.properties file while > upgrading from version 4.2->................4.15 through the years. > > When I look in the commands.properties file, I see in the description > 8=user.... I can't fint any line in this file with =8 > > Parts of our commands.properties file: > > :/etc/cloudstack/management# cat commands.properties > # Licensed to the Apache Software Foundation (ASF) under one > # or more contributor license agreements. See the NOTICE file > # distributed with this work for additional information > # regarding copyright ownership. The ASF licenses this file > # to you under the Apache License, Version 2.0 (the > # "License"); you may not use this file except in compliance > # with the License. You may obtain a copy of the License at > # > # http://www.apache.org/licenses/LICENSE-2.0 > # > # Unless required by applicable law or agreed to in writing, > # software distributed under the License is distributed on an > # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY > # KIND, either express or implied. See the License for the > # specific language governing permissions and limitations > # under the License. > > ### bitmap of permissions at the end of each classname, 1 = ADMIN, 2 = > RESOURCE_DOMAIN_ADMIN, 4 = DOMAIN_ADMIN, 8 = USER > ### Please standardize naming conventions to camel-case (even for > acronyms). > > ### CloudStack authentication commands > login=15 > logout=15 > > ### SAML SSO/SLO commands > samlSso=15 > samlSlo=15 > getSPMetadata=15 > listIdps=15 > authorizeSamlSso=7 > listSamlAuthorization=7 > listAndSwitchSamlAccount=15 > > ### Account commands > createAccount=7 > deleteAccount=7 > updateAccount=7 > disableAccount=7 > enableAccount=7 > lockAccount=7 > listAccounts=15 > markDefaultZoneForAccount=1 > > #### User commands > createUser=7 > deleteUser=7 > updateUser=15 > listUsers=15 > lockUser=7 > disableUser=7 > enableUser=7 > getUser=1 > > #### Domain commands > createDomain=1 > updateDomain=1 > deleteDomain=1 > listDomains=7 > listDomainChildren=7 > > ####Cloud Identifier commands > getCloudIdentifier=15 > > #### Limit commands > updateResourceLimit=7 > updateResourceCount=7 > listResourceLimits=15 > > #### VM commands > deployVirtualMachine=15 > destroyVirtualMachine=15 > rebootVirtualMachine=15 > startVirtualMachine=15 > stopVirtualMachine=15 > resetPasswordForVirtualMachine=15 > resetSSHKeyForVirtualMachine=15 > updateVirtualMachine=15 > listVirtualMachines=15 > getVMPassword=15 > restoreVirtualMachine=15 > changeServiceForVirtualMachine=15 > scaleVirtualMachine=15 > assignVirtualMachine=7 > migrateVirtualMachine=1 > migrateVirtualMachineWithVolume=1 > recoverVirtualMachine=15 > expungeVirtualMachine=15 > getVirtualMachineUserData=15 > > #### snapshot commands > createSnapshot=15 > listSnapshots=15 > deleteSnapshot=15 > createSnapshotPolicy=15 > updateSnapshotPolicy=15 > deleteSnapshotPolicies=15 > listSnapshotPolicies=15 > revertSnapshot=15 > > #### template commands > createTemplate=15 > registerTemplate=15 > updateTemplate=15 > copyTemplate=15 > deleteTemplate=15 > listTemplates=15 > ..................... > > Med vennlig hilsen > > David Larsen > Senior systemkonsulent > > > -- Daan
