Create admin who cannot create or restore backup

B

brancott

Member
Apr 11, 2022
9
0
6
Hi guys, I'm trying to create a role with all admin permissions except manipulating backups. I excluded VM.Backup privilege and cannot restore backups now, but backup creation is still there. What else should I exclude?
I need only a couple admins to work with backups but all others still should have admin rights for everything except backups.
 
LnxBil said:
Then you have your desired restriction and your problem is solved.
Click to expand...
Not exactly cos I need all admins to be able to work with datastores and just some of them to be able to create backups and looks like I can't get both.
 
brancott said:
Not exactly cos I need all admins to be able to work with datastores and just some of them to be able to create backups and looks like I can't get both.
Click to expand...
If your backup storage is disjunct from the other storage system, it is possible with the ACL. Just give those "not-so-much-admin"-Users the permission to administer some storages but not all.
 
LnxBil said:
If your backup storage is disjunct from the other storage system, it is possible with the ACL. Just give those "not-so-much-admin"-Users the permission to administer some storages but not all.
Click to expand...
Сan you elaborate on how to do this exactly? There are acls in pbs but in proxmox itself?
 
I have to check with PBS, but without it - so normal storage, it is in the permission settings. >ou can set roles to a path in the permission tree, so you can set specific roles for paths, so that you have access to some storage systems and not to others.
 
You must log in or register to reply here.
Top Bottom