Group admin permission

[wiryono]

Hi is it possible to gave permission for a user to manage user of a group only ?
It can add user to this group, but It cannot modify other user outside this group.

If I gave a user permission as PVEUserAdmin to /access, then the user can edit any user password even the root.
Is it possible to restrict user to group just like restrict vm to a group ?

 

[fabian]

you can give User.Modify permissions on /access/groups/GROUPNAME, then the user can create new users (if Realm.Allocate on the user's realm is set as well) or modify existing ones within that group.

 

[wiryono]

Ok it's working now. Thanks for the info.
The path a bit confusing