How to Allow Customer to Access Only Their Own VM Backup in PBS?

[powersupport]

Hi,

I need to provide a customer with access to Proxmox Backup Server (PBS) so they can download and restore their own VM backups. However, the PBS contains backups of many other VMs, and I want to ensure that the customer can only see and access their own VM backups.

Could you please guide me on how to:

1. Create a user in PBS with limited access.
2. Assign permissions so the customer can only see their own VM backups and not others.
3. Allow them to download and restore backups from PBS.

Looking forward to your advice. Thank you.

 

[Johannes S]

Setup a dedicated namespace for the user and setup permissions accordingly. Another (more paranoid) option would be to give the customer his own dedicated datastore.
In both cases the manual should give you your answers:
https://pbs.proxmox.com/docs/storage.html#backup-namespaces
https://pbs.proxmox.com/docs/user-management.html#access-control

 

[fabian]

yeah, the easiest way is probably to setup a new namespace, sync the groups you want to give access to into that namespace using the desired user as owner (this sync will only copy the metadata, since namespaces within a single datastore share the chunk store), and give that user limited privileges to only access their own backups.