Hi all, if you go in webadmin into the permissions subtab, it will show you only the permissions directly added to the VM, not the inherited once. This is not the case for any other entity like template where also the inherited permissions are shown. At first it looks like a bug, but the code is very explicit about it and looks like this in PermissionListModel: boolean directOnly = objType == VdcObjectType.VM ? true : false; And this code is there since the introduction of the engine. Any chance there is someone out there who remembers why? Can this be dropped and just show the inherited permissions also for VMs? Or is there a deep meaning behind it? Thanx, Tomas