Limitation with creating a user with Read-only access in VIO Manager CLI

Products

• VMware Integrated OpenStack

Issue/Introduction

• Unable to create a user with read-only access in VIO Manager CLI and restrict the privileges to only list and view the openstack inventory items and not allowing the user from performing any operations or modifications.

Environment

7.x

Cause

• The VIO Manager CLI (`viocli`)is a management interface for the VIO appliance and its deployments. 
• It is not integrated with Keystone for user management or role-based access control.
• VIO Manager users are local OS-level users on the Photon OS appliance, and access to `viocli` is typically restricted to the `root` user or a privileged admin user created during deployment

Resolution

• This is a product limitation by design and unlike in GUI we cannot create a "read-only user for the VIO Manager CLI (`viocli`) directly". This is because 

1. `viocli` access is local to the VIO Manager appliance, and typically restricted to the `root` user.
2.  VMware Integrated OpenStack does not expose RBAC for `viocli`, only for OpenStack APIs (via Keystone)