Re: [ovirt-users] User with SuperAdmin Role has not MANIPULATE_STORAGE_DOMAIN
Le mercredi 13 janvier 2016 à 14:37 +0100, Kevin C a écrit : > > Le 12/01/2016 16:57, Maor Lipchuk a écrit : > > - Original Message - > > > From: "Kevin COUSIN" > > > To: "Maor Lipchuk" > > > Cc: "users" , "Oved Ourfali" > > m> > > > Sent: Tuesday, January 12, 2016 5:06:22 PM > > > Subject: Re: [ovirt-users] User with SuperAdmin Role has not > > > MANIPULATE_STORAGE_DOMAIN > > > > > > I set SuperAdmin Role on a group. > > > It dosen't work with StorageAdmin role. > > > I can't add set roles with my directory account, I need to use ad > > > min@internal > > > account. > > > > Which DC are you trying to attach the Storage Domain? > > I try to attach the Storage Domain to the Default DC (I have only one > DC). > > > From the attached print screens it looks like the DC you have > > permissions on are infra and local. > infra.local is our AD realm. > > > Also, Which oVirt version are you using? > I am using oVirt 3.6.1. > > > If it is possible can you please send print screens with the > > permissions of the user and the permissions on the Data Center? > You have print screens attached but I think you're right. I set roles > on > a group, and I can see my user has not Admin role defined desipte my > user is on the group (I can login with this user, create VM...). > I confirm. If I set SuperAdmin role on user, I can attach my storage. Roles can not be applied from groups from my users are ? Regards > > > > Thanks, > > Maor > Regards, > > Kevin C > > > > > > ---- > > > > > > COUSIN Kevin > > > > > > - Mail original - > > > > De: "Maor Lipchuk" > > > > À: "Kevin C" > > > > Cc: "users" , "Oved Ourfali" > > > com> > > > > Envoyé: Mardi 12 Janvier 2016 13:57:16 > > > > Objet: Re: [ovirt-users] User with SuperAdmin Role has not > > > > MANIPULATE_STORAGE_DOMAIN > > > > - Original Message - > > > > > From: "Kevin C" > > > > > To: "Maor Lipchuk" > > > > > Cc: "users" , "Oved Ourfali" > > > > t.com> > > > > > Sent: Monday, January 11, 2016 11:04:11 AM > > > > > Subject: Re: [ovirt-users] User with SuperAdmin Role has not > > > > > MANIPULATE_STORAGE_DOMAIN > > > > > > > > > > > > > > > > > > > > Le 09/01/2016 16:09, Maor Lipchuk a écrit : > > > > > > Hi Kevin, > > > > > > > > > > > > Does it still reproduce after the permissions were set? > > > > > > > > > > > > Regards, > > > > > > Maor > > > > > > > > > > > Hi Maor, > > > > > > > > > > Yes it does, I just try it with another Domain. > > > > > > > > > > Regards > > > > > > > > Which role have you added to your user? Can u please try to > > > > edit the role > > > > which > > > > you have added to your user, does the role "Configure Storage > > > > Domain" is > > > > marked > > > > (See attached screenshot). > > > > Can you please try to add to the user the role StorageAdmin > > > > (See second > > > > attached > > > > screenshot) > > > > > > > > Regards, > > > > Maor > > > > > > > > > --- > > > > > > > > > > Kevin C > > > > > > > > > > > > > > > > - Original Message - > > > > > > > From: "Oved Ourfali" > > > > > > > To: "Kevin C" > > > > > > > Cc: "users" > > > > > > > Sent: Friday, January 8, 2016 1:20:53 PM > > > > > > > Subject: Re: [ovirt-users] User with SuperAdmin Role has > > > > > > > not > > > > > > > MANIPULATE_STORAGE_DOMAIN > > > > > > > > > > > > > > > > > > > > > > > > > > > > CC-ing someone from the storage team to take a look. > > > > > > > On Jan 7, 2016 6:43 PM, "Kevin C" < kevin@fami
Re: [ovirt-users] User with SuperAdmin Role has not MANIPULATE_STORAGE_DOMAIN
- Original Message - > From: "Kevin COUSIN" > To: "Maor Lipchuk" > Cc: "users" , "Oved Ourfali" > Sent: Tuesday, January 12, 2016 5:06:22 PM > Subject: Re: [ovirt-users] User with SuperAdmin Role has not > MANIPULATE_STORAGE_DOMAIN > > I set SuperAdmin Role on a group. > It dosen't work with StorageAdmin role. > I can't add set roles with my directory account, I need to use admin@internal > account. Which DC are you trying to attach the Storage Domain? From the attached print screens it looks like the DC you have permissions on are infra and local. Also, Which oVirt version are you using? If it is possible can you please send print screens with the permissions of the user and the permissions on the Data Center? Thanks, Maor > > > >COUSIN Kevin > > - Mail original - > > De: "Maor Lipchuk" > > À: "Kevin C" > > Cc: "users" , "Oved Ourfali" > > Envoyé: Mardi 12 Janvier 2016 13:57:16 > > Objet: Re: [ovirt-users] User with SuperAdmin Role has not > > MANIPULATE_STORAGE_DOMAIN > > > ----- Original Message ----- > >> From: "Kevin C" > >> To: "Maor Lipchuk" > >> Cc: "users" , "Oved Ourfali" > >> Sent: Monday, January 11, 2016 11:04:11 AM > >> Subject: Re: [ovirt-users] User with SuperAdmin Role has not > >> MANIPULATE_STORAGE_DOMAIN > >> > >> > >> > >> Le 09/01/2016 16:09, Maor Lipchuk a écrit : > >> > Hi Kevin, > >> > > >> > Does it still reproduce after the permissions were set? > >> > > >> > Regards, > >> > Maor > >> > > >> Hi Maor, > >> > >> Yes it does, I just try it with another Domain. > >> > >> Regards > > > > > > Which role have you added to your user? Can u please try to edit the role > > which > > you have added to your user, does the role "Configure Storage Domain" is > > marked > > (See attached screenshot). > > Can you please try to add to the user the role StorageAdmin (See second > > attached > > screenshot) > > > > Regards, > > Maor > > > >> > >> --- > >> > >> Kevin C > >> > >> > >> > - Original Message - > >> >> From: "Oved Ourfali" > >> >> To: "Kevin C" > >> >> Cc: "users" > >> >> Sent: Friday, January 8, 2016 1:20:53 PM > >> >> Subject: Re: [ovirt-users] User with SuperAdmin Role has not > >> >> MANIPULATE_STORAGE_DOMAIN > >> >> > >> >> > >> >> > >> >> CC-ing someone from the storage team to take a look. > >> >> On Jan 7, 2016 6:43 PM, "Kevin C" < ke...@famillecousin.fr > wrote: > >> >> > >> >> > >> >> > >> >> Hi, > >> >> > >> >> I set it on "system" level, on right upper side. > >> >> > >> >> Regards, > >> >> > >> >> Le 07/01/2016 17:39, Oved Ourfali a écrit : > >> >> > >> >> > >> >> > >> >> > >> >> Permissions in ovirt are composed of the role, user/group, and object. > >> >> > >> >> I guess you refer to the SuperUser role. Question is what object you've > >> >> granted it on. > >> >> > >> >> In order to have a permission on "system" level, you gave to go to the > >> >> configure dialog (see right upper side of your screen). > >> >> > >> >> Regards, > >> >> Oved Ourfali > >> >> Hi list, > >> >> > >> >> I set the SuperAdmin Role on a AD group. I use my account in this group > >> >> to > >> >> use oVirt. I try today to add an Export Domain but I failed with this > >> >> error > >> >> in log : > >> >> > >> >> 2016-01-07 16:46:28,883 INFO > >> >> [org.ovirt.engine.core.bll.storage.AttachStorageDomainToPoolCommand] > >> >> (default task-1) [68d5410a] No permission found for user > >> >> '8ac67747-110c-4125-86f1-1f52ca0e7705' or one of the groups he is > >> >> member > >> >> of, > >> >> when running action 'AttachStorageDomainToPool', Required permissions > >> >> are: > >> >> Action type: 'ADMIN' Action group: 'MANIPULATE_STORAGE_DOMAIN' Object > >> >> type: > >> >> 'Storage' Object ID: 'c7dee64d-a27e-446e-8656-cef2d8ea42a6'. > >> >> > >> >> > >> >> Where can I set the good permission ? > >> >> > >> >> Thanks a lot > >> >> --- > >> >> Kevin C > >> >> ___ > >> >> Users mailing list > >> >> Users@ovirt.org > >> >> http://lists.ovirt.org/mailman/listinfo/users > >> >> > >> >> > >> >> > >> >> > >> >> ___ > >> >> Users mailing list > >> >> Users@ovirt.org > >> >> http://lists.ovirt.org/mailman/listinfo/users > >> >> > >> > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] User with SuperAdmin Role has not MANIPULATE_STORAGE_DOMAIN
I set SuperAdmin Role on a group. It dosen't work with StorageAdmin role. I can't add set roles with my directory account, I need to use admin@internal account. COUSIN Kevin - Mail original - > De: "Maor Lipchuk" > À: "Kevin C" > Cc: "users" , "Oved Ourfali" > Envoyé: Mardi 12 Janvier 2016 13:57:16 > Objet: Re: [ovirt-users] User with SuperAdmin Role has not > MANIPULATE_STORAGE_DOMAIN > - Original Message - >> From: "Kevin C" >> To: "Maor Lipchuk" >> Cc: "users" , "Oved Ourfali" >> Sent: Monday, January 11, 2016 11:04:11 AM >> Subject: Re: [ovirt-users] User with SuperAdmin Role has not >> MANIPULATE_STORAGE_DOMAIN >> >> >> >> Le 09/01/2016 16:09, Maor Lipchuk a écrit : >> > Hi Kevin, >> > >> > Does it still reproduce after the permissions were set? >> > >> > Regards, >> > Maor >> > >> Hi Maor, >> >> Yes it does, I just try it with another Domain. >> >> Regards > > > Which role have you added to your user? Can u please try to edit the role > which > you have added to your user, does the role "Configure Storage Domain" is > marked > (See attached screenshot). > Can you please try to add to the user the role StorageAdmin (See second > attached > screenshot) > > Regards, > Maor > >> >> --- >> >> Kevin C >> >> >> > - Original Message - >> >> From: "Oved Ourfali" >> >> To: "Kevin C" >> >> Cc: "users" >> >> Sent: Friday, January 8, 2016 1:20:53 PM >> >> Subject: Re: [ovirt-users] User with SuperAdmin Role has not >> >> MANIPULATE_STORAGE_DOMAIN >> >> >> >> >> >> >> >> CC-ing someone from the storage team to take a look. >> >> On Jan 7, 2016 6:43 PM, "Kevin C" < ke...@famillecousin.fr > wrote: >> >> >> >> >> >> >> >> Hi, >> >> >> >> I set it on "system" level, on right upper side. >> >> >> >> Regards, >> >> >> >> Le 07/01/2016 17:39, Oved Ourfali a écrit : >> >> >> >> >> >> >> >> >> >> Permissions in ovirt are composed of the role, user/group, and object. >> >> >> >> I guess you refer to the SuperUser role. Question is what object you've >> >> granted it on. >> >> >> >> In order to have a permission on "system" level, you gave to go to the >> >> configure dialog (see right upper side of your screen). >> >> >> >> Regards, >> >> Oved Ourfali >> >> Hi list, >> >> >> >> I set the SuperAdmin Role on a AD group. I use my account in this group to >> >> use oVirt. I try today to add an Export Domain but I failed with this >> >> error >> >> in log : >> >> >> >> 2016-01-07 16:46:28,883 INFO >> >> [org.ovirt.engine.core.bll.storage.AttachStorageDomainToPoolCommand] >> >> (default task-1) [68d5410a] No permission found for user >> >> '8ac67747-110c-4125-86f1-1f52ca0e7705' or one of the groups he is member >> >> of, >> >> when running action 'AttachStorageDomainToPool', Required permissions are: >> >> Action type: 'ADMIN' Action group: 'MANIPULATE_STORAGE_DOMAIN' Object >> >> type: >> >> 'Storage' Object ID: 'c7dee64d-a27e-446e-8656-cef2d8ea42a6'. >> >> >> >> >> >> Where can I set the good permission ? >> >> >> >> Thanks a lot >> >> --- >> >> Kevin C >> >> ___ >> >> Users mailing list >> >> Users@ovirt.org >> >> http://lists.ovirt.org/mailman/listinfo/users >> >> >> >> >> >> >> >> >> >> ___ >> >> Users mailing list >> >> Users@ovirt.org >> >> http://lists.ovirt.org/mailman/listinfo/users >> >> >> ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] User with SuperAdmin Role has not MANIPULATE_STORAGE_DOMAIN
- Original Message - > From: "Kevin C" > To: "Maor Lipchuk" > Cc: "users" , "Oved Ourfali" > Sent: Monday, January 11, 2016 11:04:11 AM > Subject: Re: [ovirt-users] User with SuperAdmin Role has not > MANIPULATE_STORAGE_DOMAIN > > > > Le 09/01/2016 16:09, Maor Lipchuk a écrit : > > Hi Kevin, > > > > Does it still reproduce after the permissions were set? > > > > Regards, > > Maor > > > Hi Maor, > > Yes it does, I just try it with another Domain. > > Regards Which role have you added to your user? Can u please try to edit the role which you have added to your user, does the role "Configure Storage Domain" is marked (See attached screenshot). Can you please try to add to the user the role StorageAdmin (See second attached screenshot) Regards, Maor > > --- > > Kevin C > > > > ----- Original Message - > >> From: "Oved Ourfali" > >> To: "Kevin C" > >> Cc: "users" > >> Sent: Friday, January 8, 2016 1:20:53 PM > >> Subject: Re: [ovirt-users] User with SuperAdmin Role has not > >>MANIPULATE_STORAGE_DOMAIN > >> > >> > >> > >> CC-ing someone from the storage team to take a look. > >> On Jan 7, 2016 6:43 PM, "Kevin C" < ke...@famillecousin.fr > wrote: > >> > >> > >> > >> Hi, > >> > >> I set it on "system" level, on right upper side. > >> > >> Regards, > >> > >> Le 07/01/2016 17:39, Oved Ourfali a écrit : > >> > >> > >> > >> > >> Permissions in ovirt are composed of the role, user/group, and object. > >> > >> I guess you refer to the SuperUser role. Question is what object you've > >> granted it on. > >> > >> In order to have a permission on "system" level, you gave to go to the > >> configure dialog (see right upper side of your screen). > >> > >> Regards, > >> Oved Ourfali > >> Hi list, > >> > >> I set the SuperAdmin Role on a AD group. I use my account in this group to > >> use oVirt. I try today to add an Export Domain but I failed with this > >> error > >> in log : > >> > >> 2016-01-07 16:46:28,883 INFO > >> [org.ovirt.engine.core.bll.storage.AttachStorageDomainToPoolCommand] > >> (default task-1) [68d5410a] No permission found for user > >> '8ac67747-110c-4125-86f1-1f52ca0e7705' or one of the groups he is member > >> of, > >> when running action 'AttachStorageDomainToPool', Required permissions are: > >> Action type: 'ADMIN' Action group: 'MANIPULATE_STORAGE_DOMAIN' Object > >> type: > >> 'Storage' Object ID: 'c7dee64d-a27e-446e-8656-cef2d8ea42a6'. > >> > >> > >> Where can I set the good permission ? > >> > >> Thanks a lot > >> --- > >> Kevin C > >> ___ > >> Users mailing list > >> Users@ovirt.org > >> http://lists.ovirt.org/mailman/listinfo/users > >> > >> > >> > >> > >> ___ > >> Users mailing list > >> Users@ovirt.org > >> http://lists.ovirt.org/mailman/listinfo/users > >> > >___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] User with SuperAdmin Role has not MANIPULATE_STORAGE_DOMAIN
Le 09/01/2016 16:09, Maor Lipchuk a écrit : Hi Kevin, Does it still reproduce after the permissions were set? Regards, Maor Hi Maor, Yes it does, I just try it with another Domain. Regards --- Kevin C - Original Message - From: "Oved Ourfali" To: "Kevin C" Cc: "users" Sent: Friday, January 8, 2016 1:20:53 PM Subject: Re: [ovirt-users] User with SuperAdmin Role has not MANIPULATE_STORAGE_DOMAIN CC-ing someone from the storage team to take a look. On Jan 7, 2016 6:43 PM, "Kevin C" < ke...@famillecousin.fr > wrote: Hi, I set it on "system" level, on right upper side. Regards, Le 07/01/2016 17:39, Oved Ourfali a écrit : Permissions in ovirt are composed of the role, user/group, and object. I guess you refer to the SuperUser role. Question is what object you've granted it on. In order to have a permission on "system" level, you gave to go to the configure dialog (see right upper side of your screen). Regards, Oved Ourfali Hi list, I set the SuperAdmin Role on a AD group. I use my account in this group to use oVirt. I try today to add an Export Domain but I failed with this error in log : 2016-01-07 16:46:28,883 INFO [org.ovirt.engine.core.bll.storage.AttachStorageDomainToPoolCommand] (default task-1) [68d5410a] No permission found for user '8ac67747-110c-4125-86f1-1f52ca0e7705' or one of the groups he is member of, when running action 'AttachStorageDomainToPool', Required permissions are: Action type: 'ADMIN' Action group: 'MANIPULATE_STORAGE_DOMAIN' Object type: 'Storage' Object ID: 'c7dee64d-a27e-446e-8656-cef2d8ea42a6'. Where can I set the good permission ? Thanks a lot --- Kevin C ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] User with SuperAdmin Role has not MANIPULATE_STORAGE_DOMAIN
Hi Kevin, Does it still reproduce after the permissions were set? Regards, Maor - Original Message - > From: "Oved Ourfali" > To: "Kevin C" > Cc: "users" > Sent: Friday, January 8, 2016 1:20:53 PM > Subject: Re: [ovirt-users] User with SuperAdmin Role has not > MANIPULATE_STORAGE_DOMAIN > > > > CC-ing someone from the storage team to take a look. > On Jan 7, 2016 6:43 PM, "Kevin C" < ke...@famillecousin.fr > wrote: > > > > Hi, > > I set it on "system" level, on right upper side. > > Regards, > > Le 07/01/2016 17:39, Oved Ourfali a écrit : > > > > > Permissions in ovirt are composed of the role, user/group, and object. > > I guess you refer to the SuperUser role. Question is what object you've > granted it on. > > In order to have a permission on "system" level, you gave to go to the > configure dialog (see right upper side of your screen). > > Regards, > Oved Ourfali > Hi list, > > I set the SuperAdmin Role on a AD group. I use my account in this group to > use oVirt. I try today to add an Export Domain but I failed with this error > in log : > > 2016-01-07 16:46:28,883 INFO > [org.ovirt.engine.core.bll.storage.AttachStorageDomainToPoolCommand] > (default task-1) [68d5410a] No permission found for user > '8ac67747-110c-4125-86f1-1f52ca0e7705' or one of the groups he is member of, > when running action 'AttachStorageDomainToPool', Required permissions are: > Action type: 'ADMIN' Action group: 'MANIPULATE_STORAGE_DOMAIN' Object type: > 'Storage' Object ID: 'c7dee64d-a27e-446e-8656-cef2d8ea42a6'. > > > Where can I set the good permission ? > > Thanks a lot > --- > Kevin C > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > > > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] User with SuperAdmin Role has not MANIPULATE_STORAGE_DOMAIN
CC-ing someone from the storage team to take a look. On Jan 7, 2016 6:43 PM, "Kevin C" wrote: > Hi, > > I set it on "system" level, on right upper side. > > Regards, > > Le 07/01/2016 17:39, Oved Ourfali a écrit : > > Permissions in ovirt are composed of the role, user/group, and object. > > I guess you refer to the SuperUser role. Question is what object you've > granted it on. > > In order to have a permission on "system" level, you gave to go to the > configure dialog (see right upper side of your screen). > > Regards, > Oved Ourfali > Hi list, > > I set the SuperAdmin Role on a AD group. I use my account in this group to > use oVirt. I try today to add an Export Domain but I failed with this error > in log : > > 2016-01-07 16:46:28,883 INFO > [org.ovirt.engine.core.bll.storage.AttachStorageDomainToPoolCommand] > (default task-1) [68d5410a] No permission found for user > '8ac67747-110c-4125-86f1-1f52ca0e7705' or one of the groups he is member > of, when running action 'AttachStorageDomainToPool', Required permissions > are: Action type: 'ADMIN' Action group: 'MANIPULATE_STORAGE_DOMAIN' Object > type: 'Storage' Object ID: 'c7dee64d-a27e-446e-8656-cef2d8ea42a6'. > > > Where can I set the good permission ? > > Thanks a lot > --- > Kevin C > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users