Remove VM.Monitor from all users/roles, PVE 9.2

cwoelkers

Renowned Member
Aug 17, 2017
27
3
68
To start I am aware that the VM.Monitor permission was deprecated and then removed with the release of version 9.0. I did not remove it at the time as it seemed unimportant, and it still is. That said it has now become an annoyance.

When I am logged into the root console, usually via ssh, and run a pve command (pveversion, pveum, etc) I get the message user config - ignore invalid privilege 'VM.Monitor'. I cannot find out how to remove the permission. It is not listed in the output of pveum user permissions root@pam and trying to remove it via pveum acl delete / --roles VM.Monitor -user root@pam outputs ACL update failed: role 'VM.Monitor' does not exist.

Searching via Google did not give me any results. Attempting to search for vm.monitor in the forum fails because vm is too short, even though it should be considered one word. Quoting, "vm.monitor", did not help.

How can I remove this old permission from the root@pam user?
 
From the documentation:

Note that privileges cannot be directly assigned to users and paths without being part of a role.

When I create a test role and assign it some permission, it shows up in user.cfg just fine.