Section X: Users, Audits, Permissions, and Resources

[coolaj86]

Permissions & Such

• WebAuthn only works on a single domain

Create admin

• Create group admins for PVE Host Admins

Change default Realm

• Datacenter
  • Permissions => Realms => PVE => Default, Require TFA
  • Options => WebAuthn Settings

Create guest

• Create group guests for PVE Guest Users

1. Node => Disks => ZFS => Create ZFS
2. Create dataset

   zfs create tank1/guest1001
   zfs set quota=20G tank1/guest1001

3. Create guest-templates

   zfs create tank1/guest-templates
   zfs set quota=20G tank1/guest-templates
   zfs set mountpoint=/mnt/guest-templates tank1/guest-templates

4. Datacenter => Storage => Directory => /mnt/guest-templates

[coolaj86]

Roles and Privileges

• https://pve.proxmox.com/pve-docs/chapter-pveum.html#pveum_roles
• https://pve.proxmox.com/pve-docs/chapter-pveum.html#_privileges

Admin vs PVEAdmin

+ Mapping.Modify
+ Permissions.Modify
+ Realm.Allocate
+ Sys.AccessNetwork
+ Sys.Incoming
+ Sys.Modify
+ Sys.PowerMgmt

Administrator

Datastore.Allocate
Datastore.AllocateSpace
Datastore.AllocateTemplate
Datastore.Audit
Group.Allocate
Mapping.Audit
Mapping.Modify
Mapping.Use
Permissions.Modify
Pool.Allocate
Pool.Audit
Realm.Allocate
Realm.AllocateUser
SDN.Allocate
SDN.Audit
SDN.Use
Sys.AccessNetwork
Sys.Audit
Sys.Console
Sys.Incoming
Sys.Modify
Sys.PowerMgmt
Sys.Syslog
User.Modify
VM.Allocate
VM.Audit
VM.Backup
VM.Clone
VM.Config.CDROM
VM.Config.CPU
VM.Config.Cloudinit
VM.Config.Disk
VM.Config.HWType
VM.Config.Memory
VM.Config.Network
VM.Config.Options
VM.Console
VM.Migrate
VM.Monitor
VM.PowerMgmt
VM.Snapshot
VM.Snapshot.Rollback

PVE Admin

Datastore.Allocate
Datastore.AllocateSpace
Datastore.AllocateTemplate
Datastore.Audit
Group.Allocate
Mapping.Audit
Mapping.Use
Pool.Allocate
Pool.Audit
Realm.AllocateUser
SDN.Allocate
SDN.Audit
SDN.Use
Sys.Audit
Sys.Console
Sys.Syslog
User.Modify
VM.Allocate
VM.Audit
VM.Backup
VM.Clone
VM.Config.CDROM
VM.Config.CPU
VM.Config.Cloudinit
VM.Config.Disk
VM.Config.HWType
VM.Config.Memory
VM.Config.Network
VM.Config.Options
VM.Console
VM.Migrate
VM.Monitor
VM.PowerMgmt
VM.Snapshot
VM.Snapshot.Rollback