User is not authorized to perform this action. - trying to add SSH Public Key for a user

I'm following the example[1] and getting an error: User is not authorized to perform this action. What permission do I need (I'm using admin@internal) in order to do this? Engine.log: 2017-12-28 07:25:35,571-05 WARN [org.ovirt.engine.core.bll.AddUserProfileCommand] (default task-13) [5af96d04-f81d-4c76-9f06-ee03a12e2f71] Validation of action 'AddUserProfile' failed for user admin@internal-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__USER_PROFILE,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2017-12-28 07:25:35,572-05 DEBUG [org.ovirt.engine.core.common.di.interceptor.DebugLoggingInterceptor] (default task-13) [5af96d04-f81d-4c76-9f06-ee03a12e2f71] method: runAction, params: [AddUserProfile, UserProfileParameters:{commandId='a57680f0-3926-4808-8452-ea8d67b076a3', user='null', commandType='Unknown'}], timeElapsed: 41ms 2017-12-28 07:25:35,577-05 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-13) [] Operation Failed: [User is not authorized to perform this action.] TIA, Y. [1] https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/add_user_...

On 28 Dec 2017, at 13:49, Yaniv Kaul <ykaul@redhat.com> wrote: =20 I'm following the example[1] and getting an error: User is not authorized to perform this action. =20 What permission do I need (I'm using admin@internal) in order to do =
--Apple-Mail=_4DE47B10-A6A5-4D28-8A49-79C5DF918248 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 this? UserProfileEditor
Engine.log: 2017-12-28 07:25:35,571-05 WARN = [org.ovirt.engine.core.bll.AddUserProfileCommand] (default task-13) = [5af96d04-f81d-4c76-9f06-ee03a12e2f71] Validation of action = 'AddUserProfile' failed for user admin@internal-authz. Reasons: = VAR__ACTION__ADD,VAR__TYPE__USER_PROFILE,USER_NOT_AUTHORIZED_TO_PERFORM_AC= TION 2017-12-28 07:25:35,572-05 DEBUG = [org.ovirt.engine.core.common.di.interceptor.DebugLoggingInterceptor] = (default task-13) [5af96d04-f81d-4c76-9f06-ee03a12e2f71] method: = runAction, params: [AddUserProfile, = UserProfileParameters:{commandId=3D'a57680f0-3926-4808-8452-ea8d67b076a3',= user=3D'null', commandType=3D'Unknown'}], timeElapsed: 41ms
user =E2=80=9Cnull=E2=80=9D sounds wrong
2017-12-28 07:25:35,577-05 ERROR = [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default = task-13) [] Operation Failed: [User is not authorized to perform this = action.] =20 TIA, Y. =20 [1] = https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/add_use= r_ssh_public_key.py = <https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/add_us= er_ssh_public_key.py>_______________________________________________ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel
--Apple-Mail=_4DE47B10-A6A5-4D28-8A49-79C5DF918248 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; = charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><br = class=3D""><div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D"">On 28 Dec 2017, at 13:49, Yaniv Kaul <<a = href=3D"mailto:ykaul@redhat.com" class=3D"">ykaul@redhat.com</a>> = wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D""><div = dir=3D"ltr" class=3D"">I'm following the example[1] and getting an = error:<div class=3D"">User is not authorized to perform this action.<br = class=3D""></div><div class=3D""><br class=3D""></div><div class=3D"">What= permission do I need (I'm using admin@internal) in order to do = this?</div></div></div></blockquote><div><br = class=3D""></div>UserProfileEditor</div><div><br class=3D""><blockquote = type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" class=3D""><div = class=3D"">Engine.log:</div><div class=3D""><div class=3D"">2017-12-28 = 07:25:35,571-05 WARN = [org.ovirt.engine.core.bll.AddUserProfileCommand] (default task-13) = [5af96d04-f81d-4c76-9f06-ee03a12e2f71] Validation of action = 'AddUserProfile' failed for user admin@internal-authz. Reasons: = VAR__ACTION__ADD,VAR__TYPE__USER_PROFILE,USER_NOT_AUTHORIZED_TO_PERFORM_AC= TION</div><div class=3D"">2017-12-28 07:25:35,572-05 DEBUG = [org.ovirt.engine.core.common.di.interceptor.DebugLoggingInterceptor] = (default task-13) [5af96d04-f81d-4c76-9f06-ee03a12e2f71] method: = runAction, params: = [AddUserProfile,</div></div></div></div></blockquote><blockquote = type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" class=3D""><div = class=3D""><div = class=3D"">UserProfileParameters:{commandId=3D'a57680f0-3926-4808-8452-ea8= d67b076a3', user=3D'null', commandType=3D'Unknown'}], timeElapsed: = 41ms</div></div></div></div></blockquote><div><br class=3D""></div>user = =E2=80=9Cnull=E2=80=9D sounds wrong</div><div><br class=3D""><blockquote = type=3D"cite" class=3D""><div class=3D""><div dir=3D"ltr" class=3D""><div = class=3D""><div class=3D"">2017-12-28 07:25:35,577-05 ERROR = [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default = task-13) [] Operation Failed: [User is not authorized to perform this = action.]</div></div><div class=3D""><br class=3D""></div><div = class=3D"">TIA,</div><div class=3D"">Y.</div><div class=3D""><br = class=3D""></div><div class=3D"">[1] <a = href=3D"https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples= /add_user_ssh_public_key.py" = class=3D"">https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examp= les/add_user_ssh_public_key.py</a></div></div> _______________________________________________<br class=3D"">Devel = mailing list<br class=3D""><a href=3D"mailto:Devel@ovirt.org" = class=3D"">Devel@ovirt.org</a><br = class=3D"">http://lists.ovirt.org/mailman/listinfo/devel</div></blockquote=
</div><br class=3D""></body></html>=
--Apple-Mail=_4DE47B10-A6A5-4D28-8A49-79C5DF918248--
participants (2)
-
Michal Skrivanek
-
Yaniv Kaul