Dedicated permission to manage HA resources

[Jan Wedershoven]

Hello everyone,

we are running a couple of PVE-Clusters where non Admin Users can manage/create their own VMs.
I recently rolled out a script that checks each VM for an HA group and sets the default group accordingly.

In order to allow users to add VMs to a specific HA-Group, I need to assign the "Sys.Console" permission to everyone.
As the name indicates, it is not meant for doing that.

Is there a better way to do this, or can I escalate this to a feature request?


Kind regards,
Jan

 

[fiona]

Hi,
yes, the HA-related API endpoints currently require the Sys.Console permission (or Sys.Audit for listing). Feel free to open a feature request for more fine-grained permissions on our bug tracker: https://bugzilla.proxmox.com/

 

[Jan Wedershoven]

For everyone that is looking for the same thing, I've created a feature request here: https://bugzilla.proxmox.com/show_bug.cgi?id=4597

 

[dgdo]

I have added an additional comment. Hope this will be ready soon...