<div dir="ltr"><div>Hello</div><div><br></div><div>I faced with the problem. The user can;t create a VM. The user has PowerUserRole on Cluster. He tried to create a VM with a base template and had no success.</div><div><br></div>Here some lines from log. Have no idea why it wants for EDIT_ADMIN_VM_PROPERTIES permission for user?<div><br></div><div><div><font face="monospace, monospace">2015-11-20 16:42:10,888 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] Checking whether user 'acc9ced5-a764-4d60-84d7-db4b4a498a18' or one of the groups he is member of, have the following permissions: ID: a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group CREATE_VM with role type USER, ID: 00000000-0000-0000-0000-000000000000 Type: VmTemplateAction group CREATE_VM with role type USER, ID: a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group EDIT_ADMIN_VM_PROPERTIES with role type ADMIN</font></div><div><font face="monospace, monospace">2015-11-20 16:42:10,890 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] Found permission '129c57bb-df56-4529-93d9-52db0265263f' for user when running 'AddVm', on 'Cluster' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'</font></div><div><font face="monospace, monospace">2015-11-20 16:42:10,893 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] Found permission '00000004-0004-0004-0004-000000000355' for user when running 'AddVm', on 'Template' with id '00000000-0000-0000-0000-000000000000'</font></div><div><font face="monospace, monospace">2015-11-20 16:42:10,894 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] No permission found for user when running action 'AddVm', on object 'Cluster' for action group 'EDIT_ADMIN_VM_PROPERTIES' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'.</font></div><div><font face="monospace, monospace">2015-11-20 16:42:10,894 WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] CanDoAction of action 'AddVm' failed for user vincent.engel@hitmeister.de@<a href="http://hitmeister.de">hitmeister.de</a>. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION</font></div><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr">Maksim Naumov<div>Hitmeister GmbH </div><div>Softwareentwickler</div><div><br></div><div>Habsburgerring 2</div><div>50674 Köln</div><div><br></div><div>E: <a href="mailto:maksim.naumov@hitmeister.de">maksim.naumov@hitmeister.de</a></div><div><a href="http://www.hitmeister.de">www.hitmeister.de</a> </div><div><br></div><div>HRB 59046, Amtsgericht Köln</div><div>Geschäftsführer: Dr. Gerald Schönbucher<br></div></div></div></div></div>
</div></div>