PVE Realm User with Administrator Privileges cannot update OS?

[edtrumbull]

We are running Proxmox VE 7.4-16 on a test cluster of seven nodes.
I am trying to set up a new user.
When I create the new user and add them to the pve realm with administrator privileges, they can perform the expected proxmox functions such as create new vm, migrate, shut down, etc. But they cannot run updates or start a shell session.

When I attempt to start any shell session, I get an error which states something like "Permission check failed (realm != pam)". The "Updates" action is greyed out in the GUI, so I cannot attempt OS updates.

Is there something I am missing, or is it the case that OS updates and shell access require the PAM realm?

 

[ams72]

On 8.0.4, in the Datacenter > Permissions section, I:

• created an admin group
• clicked on the Permissions title
• Add > Group Permission in the / path with the Administrator role
• added my user to the admin group

I was then able to update via the console/shell, but the GUI Upgrade button is still greyed out (prior to the update via the console).

Did you have any luck with resolving this?

Edit - Just for the sake of being thorough, I thought I should mention my user has MFA enabled and is also in the PAM realm.

 

[jsterr]

This also happens wihout MFA on 8.1.3.
I can only upgrade with root/Linux user. on pam user with Administrator rights on / ugprade button is greyed out. Is this how it should be?

 

[LnxBil]

Is this how it should be?

There is bug report / feature request. You should cc to the request to keep in sync with the current development.