On 09/07/2017 12:54 PM, [email protected] wrote:

Hello Guys,
I would like to lock a group of users to a specific node (hypervisor) so that 
they can create their VMs on this node only.
I have used /node/hyp01 for path with role PVEVMAdmin for that group, but still 
the group has access to all the other nodes.


Can you try with '/nodes/hyp01' as a permission path?
See: https://pve.proxmox.com/pve-docs/chapter-pveum.html#_objects_and_paths

Oh, and note, the GUI often uses quite coarse grained checks if it should 
display UI elements.
But, the real checks happen at the backend and are fine grained.

E.g. in you case, the user sees the other nodes and (some) of it gui elements 
(just buttons,
and such. No summary information, firewall rules, and there like – that comes 
from the backend).
Maybe that could be improved a bit...

cheers, Thomas


_______________________________________________
pve-user mailing list
[email protected]
https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user

Reply via email to