privileges

  1. M

    It is not possible to add a VirtIO RNG device under a non-root user

    As per documentation: https://pve.proxmox.com/pve-docs/chapter-qm.html#qm_virtio_rng - By adding via API there is an error: 500 only root can set 'rng0' config - In GUI 'VirtIO RNG' section is inactive. Proxmox VE 8.2.2 Is this expected and standard behavior? Is it possible to do this action...
  2. A

    Privileges propagation question

    Hi :) I have a noobish question about the propagation of privileges. I'm curious as to how it's currently implemented and if i'm doing something fundamentally wrong. I use LDAP and let's say i have three groups in LDAP, lets call them Admin , SemiAdmin and Developer for the sake of clarity...
  3. O

    Allow user to create VMs and only view and manage their own VMs

    Hello, I am desperately looking for a solution so that a user can create one or more VMs and can manage only the ones he has just created. I work for a high school with classes where we teach computer science, and we need the students to be able to create their VM without touching those of their...
  4. V

    Backup user permissions and installation on ZFS

    Hello! I have 2 questions. First about integration PBS and Proxmox VE. I want to create a separate user for this, but nowhere in the documentation, neither for PBS nor for Proxmox VE, I saw what minimal privileges it needs. Will it be enough to set Datastore.Backup? It will be necessary to...
  5. S

    Addin privilages in roles

    HI team, I am creating a user and wanted to give all the privileges to the user except the delete, I have studied the below document as well https://pve.proxmox.com/pve-docs/pve-admin-guide.html#pveum_permission_management But in this VM.Allocate this privilage will restrict the user to...
  6. B

    Create admin who cannot create or restore backup

    Hi guys, I'm trying to create a role with all admin permissions except manipulating backups. I excluded VM.Backup privilege and cannot restore backups now, but backup creation is still there. What else should I exclude? I need only a couple admins to work with backups but all others still should...
  7. H

    Could PVE separate create and remove VM privileges

    I want a user as admin who can create but can NOT remove VM and CT. It's about PVE Virtual machine related privileges: VM.Allocate: create/remove VM on a server Is there a way to separate the privileges?