I had already checked the Template and it was set to public. However,
its underlying ISO was not set to public. Changing the ISO to public
allowed me to move the VM. Thank you Pearl and Abhishek for the help! I
love this community.
Matthew Smart
President
Smart Software Solutions Inc.
108 S Pierre St.
Pierre, SD 57501
Phone: (605) 280-0383
Skype: msmart13
Email: msm...@smartsoftwareinc.com
On 9/10/20 2:00 AM, Pearl d'Silva wrote:
Hi Matthew,
A probable reason for the permission denied issue could be that the user
account doesn't have access to the template/ ISO with which the VM has been
spawned up with. Editing its permissions - i.e., making it public and sharing
the template/ISO with the specific account may help resolve the issue.
Thanks,
Pearl
________________________________
From: Matthew Smart <msm...@smartsoftwareinc.com>
Sent: Thursday, September 10, 2020 2:10 AM
To: users@cloudstack.apache.org <users@cloudstack.apache.org>
Subject: Re: AssignVirtualMachine
Yeah it is really odd. I have tried both logging into the UI as admin as
well as ensuring I have the admin key and secret and using the API
directly. I get the same error in both cases.
Matthew Smart
President
Smart Software Solutions Inc.
108 S Pierre St.
Pierre, SD 57501
Phone: (605) 280-0383
Skype: msmart13
Email: msm...@smartsoftwareinc.com
On 9/9/20 3:15 PM, Abhishek Kumar wrote:
Hi Mathew,
While trying to assign your VM from ADMIN to USER account, are you making this
API call as the user?
This error must be due to the reason that the caller of the API doesn't have
permission to operate on the given resource (VM belongs to the admin account
and the user cannot operate on it). You can try calling the same API as the
root admin and it should work.
I'm not aware of any resource on API permissions system myself but general
rules are check for API access for a particular user role, domain admin and
user account cannot operate on resources owned by users of other domains or
parent/root domain.
Regards,
Abhishek
________________________________
From: Matthew Smart <msm...@smartsoftwareinc.com>
Sent: 09 September 2020 23:32
To: users@cloudstack.apache.org <users@cloudstack.apache.org>
Subject: AssignVirtualMachine
I have not had to do this in quite some time but I can no longer assign
a VM from my root account to a user account. I get the following error:
Failed to move vm Acct[UUID-USERNAME] does not have permission to
operate with resource Acct[UUID-admin]
I know that a bunch of permission stuff has been added over the last few
releases but I have no idea which one I need to set to get this working.
I'm running 4.13.0 in case it matters. Any ideas and/or any good
resources outlining the API permissions system? I was able to find the
permissions in the UI but it looks like it is allow/deny on a per API
call basis. I added assignvirtualmachine there but it is still failing.
Thanks,
--
Matthew Smart
President
Smart Software Solutions Inc.
108 S Pierre St.
Pierre, SD 57501
Phone: (605) 280-0383
Skype: msmart13
Email: msm...@smartsoftwareinc.com
abhishek.ku...@shapeblue.com
www.shapeblue.com<http://www.shapeblue.com>
3 London Bridge Street, 3rd floor, News Building, London SE1 9SGUK
@shapeblue
pearl.dsi...@shapeblue.com
www.shapeblue.com
3 London Bridge Street, 3rd floor, News Building, London SE1 9SGUK
@shapeblue
