# Aodh Sample Policy Configuration File

Warning

JSON formatted policy file is deprecated since Aodh 12.0.0 (Wallaby). This oslopolicy-convert-json-to-yaml tool will migrate your existing JSON-formatted policy file to YAML in a backward-compatible way.

The following is an overview of all available policies in Aodh. For a sample configuration file, refer to policy.yaml.

## aodh

`context_is_admin`
  Default:

    `role:admin`

  (no description provided)

`segregation`
  Default:

    `rule:context_is_admin`

  (no description provided)

`admin_or_owner`
  Default:

    `rule:context_is_admin or project_id:%(project_id)s`

  (no description provided)

`default`
  Default:

    `rule:context_is_admin or project_id:%(project_id)s`

  (no description provided)

`telemetry:get_alarm`
  Default:

    `role:reader and project_id:%(project_id)s`

  Operations:

    - GET `/v2/alarms/{alarm_id}`

  Scope Types:

    - project

  Get an alarm.

`telemetry:get_alarms`
  Default:

    `role:reader and project_id:%(project_id)s`

  Operations:

    - GET `/v2/alarms`

  Scope Types:

    - project

  Get all alarms, based on the query provided.

`telemetry:get_alarms:all_projects`
  Default:

    `role:admin and project_id:%(project_id)s`

  Operations:

    - GET `/v2/alarms`

  Scope Types:

    - project

  Get alarms of all projects.

`telemetry:query_alarm`
  Default:

    `role:reader and project_id:%(project_id)s`

  Operations:

    - POST `/v2/query/alarms`

  Scope Types:

    - project

  Get all alarms, based on the query provided.

`telemetry:create_alarm`
  Default:

    `role:member and project_id:%(project_id)s`

  Operations:

    - POST `/v2/alarms`

  Scope Types:

    - project

  Create a new alarm.

`telemetry:change_alarm`
  Default:

    `role:member and project_id:%(project_id)s`

  Operations:

    - PUT `/v2/alarms/{alarm_id}`

  Scope Types:

    - project

  Modify this alarm.

`telemetry:delete_alarm`
  Default:

    `role:member and project_id:%(project_id)s`

  Operations:

    - DELETE `/v2/alarms/{alarm_id}`

  Scope Types:

    - project

  Delete this alarm.

`telemetry:get_alarm_state`
  Default:

    `role:reader and project_id:%(project_id)s`

  Operations:

    - GET `/v2/alarms/{alarm_id}/state`

  Scope Types:

    - project

  Get the state of this alarm.

`telemetry:change_alarm_state`
  Default:

    `role:member and project_id:%(project_id)s`

  Operations:

    - PUT `/v2/alarms/{alarm_id}/state`

  Scope Types:

    - project

  Set the state of this alarm.

`telemetry:alarm_history`
  Default:

    `role:reader and project_id:%(project_id)s`

  Operations:

    - GET `/v2/alarms/{alarm_id}/history`

  Scope Types:

    - project

  Assembles the alarm history requested.

`telemetry:query_alarm_history`
  Default:

    `role:reader and project_id:%(project_id)s`

  Operations:

    - POST `/v2/query/alarms/history`

  Scope Types:

    - project

  Define query for retrieving AlarmChange data.

`telemetry:get_quotas`
  Default:

    `role:reader and project_id:%(project_id)s`

  Operations:

    - Get `/v2/quotas`

    - Get `/v2/quotas/{project_id}`

  Scope Types:

    - project

  Get resources quotas for project.

`telemetry:update_quotas`
  Default:

    `role:admin and project_id:%(project_id)s`

  Operations:

    - POST `/v2/quotas`

  Scope Types:

    - project

  Update resources quotas for project.

`telemetry:delete_quotas`
  Default:

    `role:admin and project_id:%(project_id)s`

  Operations:

    - DELETE `/v2/quotas/{project_id}`

  Scope Types:

    - project

  Delete resources quotas for project.

`telemetry:get_metrics`
  Default:

    `role:reader and project_id:%(project_id)s`

  Operations:

    - GET `/v2/metrics`

  Scope Types:

    - project

  Get all metrics.

`telemetry:get_metrics:all_projects`
  Default:

    `role:admin and project_id:%(project_id)s`

  Operations:

    - GET `/v2/metrics`

  Scope Types:

    - project

  Get all metrics from all projects.

this page last updated: 2026-04-01 16:27:05

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.

found an error? report a bug