Access control policies created and managed by the role-based access control framework allow operators and users to provide access to certain network resources to individual projects rather than all projects. This ability opens up network design options that were not available in the past and provides a more secure approach to network resource sharing.

In the next chapter, we will explore standalone Neutron routers and their involvement in providing self-service networking to projects. In addition, we'll take a look at the configuration and use of floating IPs to provide external connectivity to instances. The configuration of highly available and distributed virtual routers will be covered in later chapters.