API: Setting features on lxc/VMID/config

[Don Daniello]

I am trying to define features to be e.g. keyctl=1 on LXC container's config, either while creating it or after creation.

I can see this working from my web browser when I'm logged in as root@pam. However, when I call this from a new user created in the pve realm with all permissions assigned (Administrator role) on the root path, the call gets 403 in response to either creating such a container or modifying existing one. All other calls I'm normally using are working on that account.

Is there some missing special role that makes using features possible for root but not for Administrator?

 

[dcsapak]

no this is indeed currently working only with root

since those things have rather large implications for the host this was done by choice
we currently do not have a 'root-like' privilege to give to users, but this is planned for sometime in the future but no concrete plans yet

 

[Don Daniello]

I see, thank you for responding. It would help to document that on the API documentation.