Allow users to see and restore backups but not delete them

Nov 27, 2023
270
72
33
Netherlands
daniel-doggy.com
Hello everyone,

I am currently trying to allow anyone in my PVE user group to see and restore backups without allowing them to delete them.
As of now the user role has permissions Datastore.AllocateSpace Datastore.Audit VM.Backup. (This allows users to see, restore and delete backups.)
But if I either try to remove Datastore.AllocateSpace or VM.Backup then anyone in the users group cannot see any backups anymore and leaving them in allows users to also delete backups. (And that is something I do not want.)
 
this is currently not possible on the PVE side. if you are using PBS, you can give the PVE host append-only access and do the pruning on the PBS side to achieve the same effect.
 
Hi,

Unfortunately, this is currently not possible in Proxmox.

The VM.Backup privilege allows users to view, restore, and also delete backups. There is no separate restore-only permission available at the moment.