<div dir="ltr">CPU pinning topology is also not used in this template. And even there is no settings in the user interface to change it.<div><br></div><div>So, currently no one user is able to create new VM.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 23, 2015 at 8:54 AM, Maksim Naumov <span dir="ltr"><<a href="mailto:maksim.naumov@hitmeister.de" target="_blank">maksim.naumov@hitmeister.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">As I was able to understand this error mean that user tried to rewrite the destination host of VM. But the problem is that there is no setting like this in the user interface. User can't change the destination 100%. It is not hardcoded in the template settings because he was trying to run Base template (which is not attached to any host). </div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 23, 2015 at 8:36 AM, Maksim Naumov <span dir="ltr"><<a href="mailto:maksim.naumov@hitmeister.de" target="_blank">maksim.naumov@hitmeister.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hello</div><div><br></div><div>I faced with the problem. The user can;t create a VM. The user has PowerUserRole on Cluster. He tried to create a VM with a base template and had no success.</div><div><br></div>Here some lines from log. Have no idea why it wants for EDIT_ADMIN_VM_PROPERTIES permission for user?<div><br></div><div><div><font face="monospace, monospace">2015-11-20 16:42:10,888 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] Checking whether user 'acc9ced5-a764-4d60-84d7-db4b4a498a18' or one of the groups he is member of, have the following permissions: ID: a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group CREATE_VM with role type USER, ID: 00000000-0000-0000-0000-000000000000 Type: VmTemplateAction group CREATE_VM with role type USER, ID: a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group EDIT_ADMIN_VM_PROPERTIES with role type ADMIN</font></div><div><font face="monospace, monospace">2015-11-20 16:42:10,890 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] Found permission '129c57bb-df56-4529-93d9-52db0265263f' for user when running 'AddVm', on 'Cluster' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'</font></div><div><font face="monospace, monospace">2015-11-20 16:42:10,893 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] Found permission '00000004-0004-0004-0004-000000000355' for user when running 'AddVm', on 'Template' with id '00000000-0000-0000-0000-000000000000'</font></div><div><font face="monospace, monospace">2015-11-20 16:42:10,894 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] No permission found for user when running action 'AddVm', on object 'Cluster' for action group 'EDIT_ADMIN_VM_PROPERTIES' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'.</font></div><div><font face="monospace, monospace">2015-11-20 16:42:10,894 WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] CanDoAction of action 'AddVm' failed for user vincent.engel@hitmeister.de@<a href="http://hitmeister.de" target="_blank">hitmeister.de</a>. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION</font></div><div><br></div>-- <br><div><div dir="ltr"><div><div dir="ltr">Maksim Naumov<div>Hitmeister GmbH </div><div>Softwareentwickler</div><div><br></div><div>Habsburgerring 2</div><div>50674 Köln</div><div><br></div><div>E: <a href="mailto:maksim.naumov@hitmeister.de" target="_blank">maksim.naumov@hitmeister.de</a></div><div><a href="http://www.hitmeister.de" target="_blank">www.hitmeister.de</a> </div><div><br></div><div>HRB 59046, Amtsgericht Köln</div><div>Geschäftsführer: Dr. Gerald Schönbucher<br></div></div></div></div></div>
</div></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div><div dir="ltr"><div><div dir="ltr">Maksim Naumov<div>Hitmeister GmbH </div><div>Softwareentwickler</div><div><br></div><div>Habsburgerring 2</div><div>50674 Köln</div><div><br></div><div>E: <a href="mailto:maksim.naumov@hitmeister.de" target="_blank">maksim.naumov@hitmeister.de</a></div><div><a href="http://www.hitmeister.de" target="_blank">www.hitmeister.de</a> </div><div><br></div><div>HRB 59046, Amtsgericht Köln</div><div>Geschäftsführer: Dr. Gerald Schönbucher<br></div></div></div></div></div>
</div>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr">Maksim Naumov<div>Hitmeister GmbH </div><div>Softwareentwickler</div><div><br></div><div>Habsburgerring 2</div><div>50674 Köln</div><div><br></div><div>E: <a href="mailto:maksim.naumov@hitmeister.de" target="_blank">maksim.naumov@hitmeister.de</a></div><div><a href="http://www.hitmeister.de" target="_blank">www.hitmeister.de</a> </div><div><br></div><div>HRB 59046, Amtsgericht Köln</div><div>Geschäftsführer: Dr. Gerald Schönbucher<br></div></div></div></div></div>
</div>