I'm using cinder volume, icehouse. In my lab, I need to disable volume snapshot for all tenants, only admin users can create volume snapshot.

In /etc/cinder/policy.json, I set:

"volume:get_snapshot": [["rule:admin_api"]],

But it doesn't work.

How to configure the openstack to disable volume snapshot feature for all tenant users?

Thanks!

Steve