Backup access for users results in Permission check failed (/storage/null, Datastore.Audit(Datastore.AllocateSpace) (403)

for clarity here are some snips to show what is currently working, albeit a bit over permissive I think in terms of access
allows user 'alan' to manage VM designated as admin(is ok)
but alllows user 'alan' full view on the PBS datastore indicated (over permissive but tolerable)

Tim
 

Attachments

  • user-permission-snip.png
    user-permission-snip.png
    69.7 KB · Views: 9
  • Datastore permission allocated to vm ref snip.png
    Datastore permission allocated to vm ref snip.png
    51.3 KB · Views: 9
if you give the user PVEDatastoreUser on the storage, they should only see volumes including backup archives relating to "their" guests..
 
Ah, lovely, thank you! I had clearly totally missed this distinction. I've set his permission to the PBS datastore to be "PVEDatastoreUser " and now it works perfectly. Just superb. Thanks!!