Howto limit pve-realm users to ceph-view only?

[jsterr]

Hello Proxmox Forum,

I wanna create a admin account that can edit nodes, vms, etc. but NOT be able to edit / delete / change things on ceph-side like pool-size or starting/stopping of the services etc. Has someone already got a fitting role for this?

Thanks Jonas

 

[jsterr]

This enables users in group noedits to do everything with vms, upload isos/templates, show everything in ceph and on nodes (configurations) but not beeing able to edit ceph, or sys-config from nodes.

Would be cool to be able to separate between ceph-sys-config permissions and non-ceph-config permissions.