VM Admins Have Access to Subscription Settings

proudpirate

New Member
Apr 16, 2024
1
0
1
Hello. I noticed when setting up users with the role of PVEVMAdmin they are able to access the PVE Subscription setting. What permission do I need remove so that users can not change this on purpose or accidently? Thank you.
 
a user needs "Sys.Modify" on "/nodes/{node}" to update the subscription.. (and without "Sys.Audit", they'll only see a limited subset of the information). the PVEVMAdmin role has neither of these privs, so you must be missing some ACL ;) or misinterpret that the GUI shows you the limited subscription info..