[ovirt-users] Re: Why do users with UserRole see all VMs

[Andrew X]

Thanks Greg. Adding the UserRole on the on specific VMs works.

I didn’t know that the workflow is to have then VMs we intend to assign created 
prior to granting users access to the UI (system). I was going about it the 
opposite way. 

I still think there’s an issue because assignment of the PowerUserRole behaves 
differently.  Users with this role can be granted UI access first, and later be 
assigned specific VMs.

Thanks again for your help.
Andrew 


> On Feb 10, 2019, at 17:40, Greg Sheremeta  wrote:
> 
> 
> 
>> On Sun, Feb 10, 2019 at 3:34 AM Andrew X  wrote:
>> Hi Everyone,
>> 
>> Whenever I add a new user and give them system permission with the UserRole, 
>> they can see all VMs in the data center. I can only control what VMs a user 
>> have access to if their role to access the system was set to PowerUserRole.
>> 
>> I've tried this on fresh installs and still the same result - with both 
>> internal and LDAP users.
>> 
>> Can someone help to let me know what I'm doing wrong? 
> 
> Sure :) Are you setting UserRole on the actual System object? "System" is 
> everything, so that's not what you want.
> Go to the specific VMs you want, Permissions, and add UserRole there.
> 
> Best wishes,
> Greg
> 
>  
>> 
>> Thanks.
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/LUILF3MUTD2Z5URAMPKH3BR4SPKQOCJF/
> 
> 
> -- 
> GREG SHEREMETA
> SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX
> Red Hat NA
> 
> gsher...@redhat.comIRC: gshereme
> 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BNQ25PKTOWKCLJOC2OYNN2AM35CSJFDP/

[ovirt-users] Re: Why do users with UserRole see all VMs

[Greg Sheremeta]

On Sun, Feb 10, 2019 at 3:34 AM Andrew X  wrote:

> Hi Everyone,
>
> Whenever I add a new user and give them system permission with the
> UserRole, they can see all VMs in the data center. I can only control what
> VMs a user have access to if their role to access the system was set to
> PowerUserRole.
>
> I've tried this on fresh installs and still the same result - with both
> internal and LDAP users.
>
> Can someone help to let me know what I'm doing wrong?
>

Sure :) Are you setting UserRole on the actual System object? "System" is
everything, so that's not what you want.
Go to the specific VMs you want, Permissions, and add UserRole there.

Best wishes,
Greg



>
> Thanks.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/LUILF3MUTD2Z5URAMPKH3BR4SPKQOCJF/
>


-- 

GREG SHEREMETA

SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX

Red Hat NA



gsher...@redhat.comIRC: gshereme

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/G352H5T67DF5KL6HTLNAQTSBPL32Z2RP/