I've tried this several ways and keep getting problematic results.
I created a group Admins, then applied Group Permissions of Path = / and Role = Administrator.
Created a testuser@pve, Group = Admins.
I can log into the GUI but can't ssh in (permission denied)
I tried doing the CLI method...