As part of adding the the vnic profiles feature, the configuration of the
port mirroring moved from a vnic level to the profile level which the vnic uses.
It unravels the need for granting a specific PORT_MIRRORING action group on the
network to allow the user to set a vnic for port mirroring on that network.
The old behaviour was simplified by granting the VnicProfileUser role on the
profile that the admin permits the user to use. The admin is responsible to
determine whether the profile should be served for port mirroring or not.
It makes the old PORT_MIRRORING action group redundant, as it is no longer
being used for controlling the port mirroring attribute of the network on the vm.
An existing permissions for user for port mirroring will be replaced with a
proper permissions on a vnic profile setted for port mirroring during upgrade.
I would like to remove the PORT_MIRRORING action group entirely from the engine
and from the REST as well.
Is there any objection for doing so ?
Show replies by date