Using an API Token to manage user permissions

[florian7843]

Hey,

I'm trying to create a tool to manage user permissions on a PVE Environment. For that my initial idea was to use a service user with an API token to do that.

When trying to use the /access/password endpoint with that token I get the following error: 403 Permission check failed (URI '/access/password' not available with API token, need proper ticket.
Is it possible to allow this use case with a configuration, or is it disabled for security reasons?

 

[Fabian Goebel]

Hello,
i tried to create users with the ansible modules https://galaxy.ansible.com/ui/repo/published/community/proxmox/ and getting the same 403 as mentioned by florian7843

I use the module with a dedicated API Token to _not_ have my password in these Ansible-resources... I would be very happy if there is a way to enable this...

 

[fabian]

that API endpoint requires the currently logged in user's password as parameter, so it doesn't work for tokens..

could you please file an enhancement request so we can discuss how to potentially make this available?

 

[Fabian Goebel]

Hello Fabian and thank you very much for your response..

I have created the mentioned enhancement request: https://bugzilla.proxmox.com/show_bug.cgi?id=6790