How can I create an user with possibility to use only specific Datastore, and with permission to create new VM/CT on specific node cluster and full manage only created VM's
Hi,
while you can restrict the set of IDs by just giving the user permissions for certain /vms/<ID>, AFAIK, guest-related permissions cannot currently be restricted to certain nodes. Feel free to open a feature request on the bug tracker after checking if one already exists: https://bugzilla.proxmox.com/
What you could do as a somewhat-workaround is create a storage that's only available on a certain node and give the user permission to only use that storage. But they can still create VMs without disks on other nodes.