non root user permission to update?

[Vorl]

Good morning, I have been looking around and I am sorry if I missed something.

I can't figure out how to give a non root user full access like root.

I have my active directory user/group visible in PVE, I go to permissions, select / select the AD group, select administrators role and check the box to propegate and that works. I can do most things, but can't update the system as that new user. What am I missing?

Thank you.

 

[Neobin]

Please have a look here: [1] and the following post there from @fiona.
Afaik, updating/upgrading the host counts among this (currently).
I do not know, if upgrading the host is already taken into account in the (not yet finished(?)/released) patch series or if it is supposed/planned to be at all, sorry.

[1] https://forum.proxmox.com/threads/adding-secondary-admin-with-full-rights.121363/post-527501

 

[Vorl]

Thank you for the info.

This is a very unfortunate and poor implementation. having a single hard coded user being the only one that can do something is a bad thing, and the inability to disable root is just another attack vector for hackers.

If people wanted to use this in the enterprise that means the account would have to be shared, and that's definitely against best security practices.

I hope they plan to fix this.