roles and access rights

[Frakir]

Hi
I have a cluster from several proxmoxes and I'm trying to give a user full access rights to only one node.
I gave Administrtator for /nodes/p1, access to local storage. It doesn't help: the user can't create any containers there.
It there a way to give full adminstrative access to only one node but not to the others?

 

[dcsapak]

does he have right to create vms/ct on /vms/<ID> or /vms or /pool/<Poolid> ? this is also necessary to create vms

 

[Frakir]

I can give him right for /vms/101, then he can create container 101.
But I can't give him right to create /vms/101 only on node p1, he can do it on the other nodes too.
And I can't give him right to create /vms/anything.
With the sotrage - storage name is the same on all nodes. He can choose templates only when he has PVEDatastoreAdmin. But then he can do anything with it on all nodes.

 

[dcsapak]

But I can't give him right to create /vms/101 only on node p1, he can do it on the other nodes too.

yes this is by design because if someone else (or ha) moves the vm to another node, suddenly he would not see his own vm anymore

 

[dcsapak]

With the sotrage - storage name is the same on all nodes. He can choose templates only when he has PVEDatastoreAdmin. But then he can do anything with it on all nodes.

what do you mean? PVEDatastoreUser should be enough