...
- Find all groups the user belongs tooto: groupIDs = 1
- Find all 'Effective' policies the groups are associated to: policies = 1, 6
- If any policy 'Allows' the startVirtualMachine API for this Vm Id, grant permission to make this call: Policy Id 6 and Permission Id 3 allow the API to be invoked for this user.
- In this case, since this is a regular user and the user is the owner of the VM, then he is granted access using policy Id 6.
...
- Find all groups the user belongs tooto: groupIDs = 3
- Find all 'Effective' policies the groups are associated to: policies = 3
- Policy Id 3 and Permission Id 2 allow 'startVirtualMachine' access for VMs in the 'Domain' scope - VMs in the domainId of the user.
- In this case, since the VM is in the domain of the user, he is granted access using policy Id 3.
...
- Find all groups the user belongs tooto: groupIDs = 2
- Find all 'Effective' policies the groups are associated to: policies = 2
- Policy Id 3 and Permission Id 1 allow 'startVirtualMachine' access for ALL VMs .
...
{"serverDuration": 141, "requestCorrelationId": "ad0c83b22e857204"}