Companion to this, but from the opposite direction, I suppose: https://forum.proxmox.com/threads/p...to-add-remote-set-up-user-permissions.185914/
Now that I'm comfortable adding remotes to my first PDM instance, I decided to add a non-root administrator to PDM itself.
So, that's not ideal. I've confirmed that these graphs all populate correctly when the root user is logged in.
Now that I'm comfortable adding remotes to my first PDM instance, I decided to add a non-root administrator to PDM itself.
- I set up a non-root admin in the PDM realm (
user@pdm), with 2FA enabled; - Under permissions, I gave the user the Administrator role in the root (
/) path. - Under the Administration tab, my non-root admin user has full view of the Node Status, but is reporting an API error on all the graphs and showing no data at all.
- A non-root Admin user in the Proxmox authentication realm on my PVE node, with Administrator role on the root (
/) path, is able to display these graphs.
So, that's not ideal. I've confirmed that these graphs all populate correctly when the root user is logged in.
- Does PDM's permissions/roles structure not support viewing this information as a non-root administrator user yet? That was my first guess. I suspect that since the PDM-realm user doesn't exist on underlying Debian server, it doesn't presently have a way to get this information, since it can't just become root to run queries against the server. (OTOH, local non-root Proxmox authentication server realm admin users can see this information on a PVE node's dashboard, so it should be possible?)
- If it's supposed to work, Is it a problem that I'm using PDM's authentication server? From reading the docs, everything seems to be controlled by what Role (or other permissions set) you have, not which authentication server you're using.
- Would it be worthwhile to open an enhancement request for this if there's not one already?
