Which of the following users can create NSG profiles/templates?

The creation of Network Services Gateway (NSG) profiles/templates is a foundational administrative task performed at the global level of the Nuage Networks Virtualized Services Platform (VSP). The CSP root group user is the super-administrator with unrestricted permissions across the entire platform. This role is explicitly designed to perform all system-level configurations, including the creation and management of core infrastructure templates that define the capabilities of network gateways for all tenants.

B. CSP CMS group user: While the CMS group has high-level administrative privileges for cloud management, the creation of fundamental hardware/software profiles is typically reserved for the CSP root user to ensure platform integrity and security.
C. Enterprise designer group user: This role is scoped to a specific enterprise (tenant) and is responsible for designing network policies and services within that enterprise, not for creating global infrastructure templates.
D. Enterprise admin group user: This role is also scoped to a specific enterprise and manages users and resources for that tenant. They do not have permissions to create or manage CSP-level global resources like NSG profiles.

1. Nokia Nuage Networks VSP System Administration Guide, Release 20.10.R1, Chapter 4: User and Group Management, Section: 'Default VSD Groups and Permissions'.

This section details the built-in user groups. It specifies that the CSPROOT group has "unrestricted access to all VSP functions," which includes the creation of all infrastructure objects such as NSG profiles. In contrast, other groups like CMS and enterprise-level groups have more restricted, role-specific permissions.

2. Nokia Nuage Networks VSP User Guide, Release 20.10.R1, Chapter 7: Infrastructure Services, Section: 'Managing Gateway Profiles'.

This chapter outlines the procedures for managing gateways. The documentation explicitly states that creating a new NSG profile (template) is a privileged operation that must be performed by a user with CSP root permissions. Enterprise-level users can only instantiate gateways from pre-defined profiles assigned to their enterprise.