What Permissions are needed on the PVE/PBS-Remotes for a Datacenter Manager User?

[982134098123]

Hello,
im planning on deploying DCM for our sites. Following this guide:
https://www.proxmox.com/images/download/pdm/docs/proxmox-datacenter-manager-1-0.pdf
everything is running.
For a better segregation i didnt used the Root-User for the Connection but created a own user. At this Point i couldnt find a recommendation on the Permissions for this user. Have i overread this or am i missing something?

 

[dcsapak]

it depends on what you want pdm to do.

In essence, the pdm token for the pve cluster needs the same permissions for it's action as when you do it on pve directly.

e.g if you want to start/stop vms, the token needs the VM.PowerMgmt permissions (or higher) for those vms.

if you just want a unified dashboard with fast access to the pve pages, audid permissions would be enough

Note that currently PDM does not know beforehand which actions it can do or not (this could be improved later of course) so it just fails if you try to do something the token is not allowed to.

 

[982134098123]

I assumed the failure of unprivileged actions.
I will then just trail and error my way to least privileges for most effects. thanks for the follow up.