[SOLVED] Allow users to resize virtual disks or: which privileges are included in role PVEVMAdmin?

[cmonty14]

Hello!
I have started user management with this guide.
However, I'm facing this issue:
No other user except for System administrator (=root) can resize virtual disks of any VM.

Can you please advise which role must be assigned to a user to grant this permission?

THX

 

[dietmar]

Can you please advise which role must be assigned to a user to grant this permission?

role PVEVMAdmin

 

[cmonty14]

role PVEVMAdmin

Hello Dietmar,
this actually meets my expectation.
However, it is not working.

This means I have executed the following steps:
pveum groupadd vmadmin -comment "VM Administrators"
pveum usermod d038783@pam -group vmadmin
pveum aclmod /pool/test -group test -role PVEVMAdmin

This is confirmed in /etc/pve/user.cfg:
root@ld4257:/etc/pve/priv# more /etc/pve/user.cfg
user:root@pam:1:0:::tho.schneider@xxx.com:::
user:d038783@pam:1:0:Thomas:Schneider:tho.schneider@xxx.com:::
group:vmuser::VM Users:
group:admin::System Administrators:
group:vmadmin:d038783@pam:VM Administrators:
pool:test:Test VMs:113,115,114::
acl:1:/admin:Administrator:
acl:1:/pool/testtestadminVEAdmin:
acl:1:/pool/testvmadminVEVMAdmin:
acl:1:/pool/testvmuserVEVMUser:
root@ld4257:/etc/pve/priv#

However I get this error when trying to resize virtual disk (see attachment):
Permission check failed (/storage/pve_vm, Datastore.AllocateSpace) (403)

 

[dcsapak]

you would also have to put the storage into the pool

 

[cmonty14]

you would also have to put the storage into the pool

This is the solution for this issue.
No further roles are required.