policy.json

{
    "compute:attach_volume": "rule:os_compute_api:os-volumes-attachments:create",
    "compute:confirm_resize": "rule:os_compute_api:servers:confirm_resize",
    "compute:create": "rule:os_compute_api:servers:create",
    "compute:delete": "rule:os_compute_api:servers:delete",
    "compute:detach_volume": "rule:os_compute_api:os-volumes-attachments:delete",
    "compute:reboot": "rule:os_compute_api:servers:reboot",
    "compute:rebuild": "rule:os_compute_api:servers:rebuild",
    "compute:resize": "rule:os_compute_api:servers:resize",
    "compute:revert_resize": "rule:os_compute_api:servers:revert_resize",
    "compute:snapshot": "rule:os_compute_api:servers:create_image",
    "compute:start": "rule:os_compute_api:servers:start",
    "compute:stop": "rule:os_compute_api:servers:stop",
    "compute:update": "rule:os_compute_api:servers:update",
    "compute:update_instance_metadata": "rule:os_compute_api:server-metadata:update",
    "compute_extension:admin_actions:lock": "rule:os_compute_api:os-lock-server:lock",
    "compute_extension:admin_actions:migrate": "rule:os_compute_api:os-migrate-server:migrate",
    "compute_extension:admin_actions:unlock": "rule:os_compute_api:os-lock-server:unlock",
    "compute_extension:aggregates": "rule:os_compute_api:os-aggregates:index",
    "compute_extension:attach_interfaces": "rule:os_compute_api:os-attach-interfaces",
    "compute_extension:certificates": "rule:os_compute_api:os-certificates:show",
    "compute_extension:console_output": "rule:os_compute_api:os-console-output",
    "compute_extension:consoles": "rule:os_compute_api:os-consoles:index",
    "compute_extension:evacuate": "rule:os_compute_api:os-evacuate",
    "compute_extension:floating_ips": "rule:os_compute_api:os-floating-ips",
    "compute_extension:hypervisors": "rule:os_compute_api:os-hypervisors",
    "compute_extension:keypairs:delete": "rule:os_compute_api:os-keypairs:delete",
    "compute_extension:quotas:update": "rule:os_compute_api:os-quota-sets:update",
    "compute_extension:security_groups": "rule:os_compute_api:os-security-groups",
    "compute_extension:services": "rule:os_compute_api:os-services",
    "compute_extension:shelve": "rule:os_compute_api:os-shelve:shelve",
    "compute_extension:simple_tenant_usage:show": "rule:os_compute_api:os-simple-tenant-usage:show",
    "compute_extension:unshelve": "rule:os_compute_api:os-shelve:unshelve",
    "network:associate_floating_ip": "rule:os_compute_api:os-floating-ips",
    "network:disassociate_floating_ip": "rule:os_compute_api:os-floating-ips"
}