Comment 1 for bug 1643076

Revision history for this message
Cory Johns (johnsca) wrote :

The documentation says that "superuser grants a user the same permissions as an administrator and complete control over the deployed environment," and "an administrator can use the grant command to grant a user either read or write access to any model."

This doesn't appear to be true at all. Rather, the superuser is dependent on the model owner to explicitly grant them access. This is also an issue if a user with add-model permission creates a model; the controller superuser cannot even view, much less manage, that model. The model can even become orphaned if the model owner is removed. This also breaks `juju models --all` with the error:

ERROR "" is not a valid tag