Limit PVE Admin to only one node

[ffrank]

Hi all,
I'm trying to limit a PVE user to be an admin on a single node.
The user shall be able to create/delete VMs including the needed storage on a given /storage/yyyTESTyyy and install from ISO images of the local storage h6local (only on host6). The user should not be able to migrate VMs off the given host.

I did add following permissions:
/nodes/host6 labtest@pve PVEAdmin
/storage/h6local labtest@pve PVEDatastoreAdmin
/storage/testStorage labtest@pve PVEDatastoreAdmin

With this, labtest is not able to create a VM on node host6.
I get the error: Permission check failed (403))


What permission am I missing???

Thanks in advance,
Frank

 

[dietmar]

I'm trying to limit a PVE user to be an admin on a single node.

We do not support such limitation. But you can restrict a storage to be available on specific nodes...

 

[ffrank]

We do not support such limitation. But you can restrict a storage to be available on specific nodes...

Yes, that's what I did. But the user can not create a VM -- getting this 403 error. Is this because of the /node/host6 limitation, or what?

 

[dietmar]

Yes, that's what I did.?

You also need 'VM.Allocate' permissions on /vms/ - see
https://pve.proxmox.com/wiki/User_Management