User to be able to transfer his vm to another user/pool

[sys7em]

I'm struggling with the following task:
I want some user to be able to give away his vm to another user/pool, without seeing or be able to edit any other vm's that do not belong to him.

But I cannot figure out if that can be done or which set of permissions will do the job.

 

[t.lamprecht]

Hi,

such one-way handovers of VM permissions are not directly possible.
What could work is implementing some sort of broker service, i.e., a small daemon/script which has API access with higher privileges and does that "remove VM ACLs from user foo and add them for user/pool bar" procedure.

Anyhow, what would be the actual use-case?

 

[sys7em]

Actual use case will be:
User A has vm 1 pool A
User A clones vm 1 -> 1_cloned
User A wants to assign that 1_cloned to user B /pool B

 

[t.lamprecht]

User A clones vm 1 -> 1_cloned
User A wants to assign that 1_cloned to user B /pool B

And the use case for clone and assigning to another pool? I.e., what are those users (hosting customers or internal teams in a company) and why do they need the pool reassignment?

A user needs Pool.Allocate on a pool to add new member, but if they have that they will see all members in the pool. So, as long as you have one pool per user (or team) that works already just fine.