"admin": "role:admin"
"admin_or_owner": "rule:admin or project_id:%(project_id)s"

"migration:providers:list": "rule:admin_or_owner"

"migration:endpoints:create": "rule:admin_or_owner"
"migration:endpoints:list": "rule:admin_or_owner"
"migration:endpoints:show": "rule:admin_or_owner"
"migration:endpoints:update": "rule:admin_or_owner"
"migration:endpoints:delete": "rule:admin_or_owner"
"migration:endpoints:validate_connection": "rule:admin_or_owner"
"migration:endpoints:list_instances": "rule:admin_or_owner"
"migration:endpoints:get_instance": "rule:admin_or_owner"
"migration:endpoints:list_networks": "rule:admin_or_owner"
"migration:endpoints:list_storage": "rule:admin_or_owner"
"migration:endpoints:list_destination_options": "rule:admin_or_owner"

"migration:migrations:create": "rule:admin_or_owner"
"migration:migrations:list": "rule:admin_or_owner"
"migration:migrations:show": "rule:admin_or_owner"
"migration:migrations:show_execution": "rule:admin_or_owner"
"migration:migrations:cancel": "rule:admin_or_owner"
"migration:migrations:delete": "rule:admin_or_owner"

"migration:replicas:create": "rule:admin_or_owner"
"migration:replicas:list": "rule:admin_or_owner"
"migration:replicas:show": "rule:admin_or_owner"
"migration:replicas:show_executions": "rule:admin_or_owner"
"migration:replicas:delete_disks": "rule:admin_or_owner"
"migration:replicas:delete": "rule:admin_or_owner"

"migration:replica_executions:create": "rule:admin_or_owner"
"migration:replica_executions:list": "rule:admin_or_owner"
"migration:replica_executions:show": "rule:admin_or_owner"
"migration:replica_executions:cancel": "rule:admin_or_owner"
"migration:replica_executions:delete": "rule:admin_or_owner"

"migration:replica_schedules:create": "rule:admin_or_owner"
"migration:replica_schedules:list": "rule:admin_or_owner"
"migration:replica_schedules:show": "rule:admin_or_owner"
"migration:replica_schedules:update": "rule:admin_or_owner"
"migration:replica_schedules:delete": "rule:admin_or_owner"
