Correct permissions for HA administration?

[konaya]

I would like a user to be able to add and remove HA resources for only her own resource pool, and preferably only for her own HA group. Which permissions do I need to set?

The reason I need this permission in the first place is because HA resources apparently have to be removed manually before one deletes a virtual machine, so as it stands right now this user can't delete her virtual machines without asking me to remove any associated HA resources. If there is some way to remove this odd limitation or automate this step, then that would also be an acceptable solution.

Currently on 5.4, but I plan to upgrade in a few days.

 

[fabian]

that's not really possible in the current ACL schema. it might be possible to include "remove HA resource" into the new "purge" mode of VM removal though, which should also solve your issue AFAICT?

@Thomas Lamprecht

 

[konaya]

Yes, that sounds like just the thing. This is new in 6.x, I presume?

 

[fabian]

yes, purge was introduced in 6.x, but does not include HA resource entries yet.

 

[konaya]

Would you consider including it? It seems like pretty reasonable behaviour to me.

 

[fabian]

yes, it does sound reasonable filed https://bugzilla.proxmox.com/show_bug.cgi?id=2580 for tracking, feel free to subscribe to get further updates.

 

[konaya]

Sorry if this constitutes necroposting, but I just wanted to thank you for listening to me and responding with a patch so quickly.