Mirage uses role-based access control to restrict system access to authorized users.

The following table lists the roles that are required by the API methods.

Table 1. Roles Required by Methods

Method

Roles Needed

Login

None

Logout

None

AppLayer_Query

ListBaseImages

BaseLayer_Query

ListBaseImages

Cvd_Query

ListBaseImages, ListEvents

Cvd_Get

ListBaseImages, ListEvents

CollectionCvd_Query

ListBaseImages, ListCvds

Policy_Query

ListPolicies

Volume_Query

ListLicense

PendingDevice_Query

ListDevices

PendingDevice_CreateNewCvd

AdministerCvds, ListDevices

OsMigration_Begin

AdministerCvds, ListCvds

OsMigration_BeginDownloadOnly

AdministerCvds, ListCvds

OsMigration_ApplyDownloadOnlyMigration

AdministerCvds, ListCvds

OsMigration_QueryDownloadOnlyInProgress

ListCvds

OsMigration_QueryDownloadOnlyCompleted

ListCvds

OsMigrationCvd_QueryDownloadOnly

ListCvds

Cvd_Archive

AdministerCvds, AdministerReferenceCvds, ListReferenceCvds, ListTasks

Cvd_Delete

AdministerCvds, ListCvds

Cvd_Sync

ListDevices, SupportDevices

Cvd_ApplyPolicy

AdministerCvds, ListCvds, ListPolicies

PendingDevice_Provision

AdministerCvds, ListBaseImages, ListDevices, ListLicense, ListPolicies

Collection_Query

ListCvds

Assignment_ApplyDownloadOnly

AdministerCvds, ListCvds

Assignment_Query

ListCvds

Cvd_AssignBaseLayer

AdministerCvds, ListCvds, ListBaseImages

Cvd_AssignBaseLayerDownloadOnly

AdministerCvds, ListCvds, ListBaseImages

Cvd_UpdateAppLayer

AdministerCvds, ListCvds, ListBaseImages

Cvd_UpdateAppLayerDownloadOnly

AdministerCvds, ListCvds, ListBaseImages