yes, you just need to ensure you give it enough privileges for the actions you want to do on the PDM sideThat was exactly the issue - the firewall between them. Migration works great now. Thank you very much for your help and for the great Proxmox stuff.
Just one more question: I’ve seen in some tutorials that the API token is created on the root PVE account. From a security and best-practice point of view, should I create a dedicated PVE account for PDM on each node instead?