Allow users to see and restore backups but not delete them

[Daniel-Doggy]

Hello everyone,

I am currently trying to allow anyone in my PVE user group to see and restore backups without allowing them to delete them.
As of now the user role has permissions Datastore.AllocateSpace Datastore.Audit VM.Backup. (This allows users to see, restore and delete backups.)
But if I either try to remove Datastore.AllocateSpace or VM.Backup then anyone in the users group cannot see any backups anymore and leaving them in allows users to also delete backups. (And that is something I do not want.)

 

[fabian]

this is currently not possible on the PVE side. if you are using PBS, you can give the PVE host append-only access and do the pruning on the PBS side to achieve the same effect.