User management and VM network settings

[MMartinez]

Hi,

To use Proxmox at a school and let students manage their virtual machines and containers with a limited role, it would be nice to have a way to filter the network vlan configuration settings available to some network role.

The goal is to be able to do some network exercices like creating DHCP Server scennarios. For that, it would be good:
1) Limit the vmbridges shown to a user or group when managing a VM or LXC.
2) Check the vlan field on a vNIC passed by a user. It could be compared with a preference (list of authorized vlans or similar) of the user or the group.

That way, the students would be able to configure their own virtual machines, network settings, vlan to configure enviroments according to guided exercices but in a controlled way.

Any idea on how to achieve this with current proxmox features?

Regards,

Manuel Martínez

 

[MMartinez]

To limit access to vmbridges maybe an option could be to use pools as in VM or storage access control. That could be an easy way to do it and coherent with current user management.

What do you think about this?

 

[skoddex]

i up this thread base on my experience. Follow my thread maybe

https://forum.proxmox.com/threads/role-vm-config-networking-prevent-cloud-init-networking.126719/

 

[bobmc]

You can run proxmox 'nested' - i.e in a VM running proxmox, no reason why you couldn't run a couple of virtual instances of proxmox on a single host, performance wouldn't be great but probably good enough for training and learning

 

[skoddex]

i think is not the real goal here, the author speak about a multi tenant team for me. So you need to restrict part of your proxmox cluster and apply roles and permission. for example a vm creation only on a specific vlan in a ressource pool. An other team B can do the same without destroy or see the team A.
Like a clouder or vmware installation