Current situation (ver 4.0, 4.1, 4.1.1) is that users can:List snapshots on the tenant, Upload a snapshot,Delete a snapshot.
We should not allow that.