User configuration recommendations

[Lemure]

Apologies if this has been asked before, I have searched the forum but I have not found it.

I know how to create users and groups in Proxmox and asign permissions. I am wondering what is the recommended setup when it comes to users. I have only one node, my home server. Is it ok or recommended to always log in with the root user? I have seen there is the a PVEAdmin role, with almost all permissions, is it more recomendable to create an admin user belonging to a group with that role, and use it normally to access the node? Any recommendation apreciated.

 

[oguz]

hi,

PVEAdmin role, with almost all permissions,

but not all, currently as it stands, some actions or options are only limited to the root@pam user.

I am wondering what is the recommended setup when it comes to users.

it really depends what permissions you want to give to the users.

see here[0] for some background on permissions.

common setup would be if a user has their own VM, to give PVEVMAdmin to that user

[0]: https://pve.proxmox.com/wiki/User_Management#pveum_permission_management

 

[Lemure]

it really depends what permissions you want to give to the users.

I will not have users, at least not users that need access to proxmox. It is my home server and, at least the proxmox part, is going to be managed by me alone. The question was going on the line if it is adviceable to be login and doing all the stuff with the root user. I guess my doubt comes from the typical linux recomendation to never be using the root user, but create a sudoer to do stuff.

 

[oguz]

if you will be using it alone, then you can just use the root user (but make sure to have a good password)

you can also set up 2 factor authentication for more security.

I guess my doubt comes from the typical linux recomendation to never be using the root user, but create a sudoer to do stuff.

even if user has sudo rights, we check specifically for root@pam so a lot of things will not work still. it's fine to use the root account.

 

[Lemure]

Yes, I have a non obvious password and 2FA. Thanks for the quick answer.