SDN create VNet permission

[Big4SMK]

Let's say I create an SDN zone called "ExampleZone" with one VNet called "ExampleVNet". My goal is for a User "ExampleUser" to be able to create additional VNets in that zone.

Going through the API hierarchy in the docs here he seems to need SDN.Audit and SDN.Allocate for the /sdn/zones/ExampleZone endpoint. However, even though I gave ExampleUser SDN.Audit, SDN.Allocate and SDN.Use permissions on that endpoint, he still doesn't see the SDN item under the Datacenter view to add additional VNets.

The user is able to use ExampleVNet for a vm, just not create additional VNets.

I'm wondering what else I need to add on pve 8.2.4 to enable the user to add VNets in their zone.

 

[sw-omit]

Can't test myself right now, but have you tried giving non-propogating (So it only shows that layer) audit (look but don't change) permission to the root "/" and/or "/SDN/Zones" paths?

 

[Big4SMK]

I just tried that to no avail, with or without propagation. Thank you for the suggestion though!

 

[Big4SMK]

Am I the only one facing this issue?