Cloud-init role

[drmartins]

Hi,
i have a problem to determine what role or privileges i have to add to user to allow him add cloud-init drive In Hardware. I want to allow users add CloudInit drive on ceph storage. If i add it as Administrator (root), users can modify everything in Cloud-init options. Users now have PVEVMAdmin and PVEDatastroreAdmin roles and cannot add CloudInit drive in Hardware. Thank you for help

 

[dgdo]

Did you found a workaround for this?
As i am also not able to add an "cloudinit drive" within the hardware tab (it is grayed out) - it only works when i logged in as "root" or user with "Adminitrator" role
User has "PVEAdmin" right...

 

[dgdo]

Or does anyone else have an idea?

 

[drmartins]

create new role PVECloudinit with privileges VM.Config.Cloudinit and assign to user

 

[dgdo]

Hello drmartins,

the sayed role "PVEAdmin" has already this priviledge:

 

[drmartins]

you should check Permissions
I had to create permission like this
/ @group PVECloudinit

 

[dgdo]

OK, ill give it a try... as i actualy set the permissions for "/pool/customer" and "/storage/<storage>" level

 

[dgdo]

Unfortunaly it doesnt work either - it is still "greyed out"


actualy i set following permissions:

/ @group PVECloudinit
/pool/customer @group PVEAdmin
/storage/localstor @group PVEAdmin

 

[drmartins]

I think you need add PVEDatastoreAdmin role to group for your storage becouse cloudinit drive is qcow2 file (or raw when ou have ceph)

 

[dgdo]

hmm - i can not imagin that this should be necessary to give an user/group the permission to creat/add cloudinit drives...
and as you have write this in your start topic it did not work for you also

 

[drmartins]

Well i wrote that i have user with datastoreadmin but i did not have role PVECloudInit
i have more clusters
i will try to get it work on others and let you know

 

[gawron737]

Has anyone solved this problem?

 

[gawron737]

Here is resolve problem
https://forum.proxmox.com/threads/adding-cloudinit-drive-as-a-normal-user.116059/