9:29 a.m.
Hi,
We are an Higher Education Institution and have set up oVirt 4.3 as a Virtual Lab
Environment, for both on-campus and distance learning students. We have integrated AD and
can log in with AD credentials for users. However, I am struggling to find the right user
role for normal student users. Basically, they need to be able to do the following:
1. Create a new VM and select from either a template or select an uploaded ISO
2. Start the VM
3. Restart the VM
4. Shutdown the VM
5. Snapshot the VM
6. Connect to the VM using either spice or vnc/novnc
7. Create a disk
8. Connect to the student network (only would be preferable here) as we have management
networks that we dont want the students be be able to see or select (if possible)
I have tested using the PowerUserRole, but that does not allow me to select VNC/noVNC or
spice and does not allow me to install from an ISO, only a template. Any suggestions on
role that I can give these users?
Thanks.
Kind regards
Kim
9:37 a.m.
Godmorgen Kim,
Not sure this is actually doable. IMO you're trying to make a kind of
not-really-admins.
Others might have better ideas than me, but I'd look into some sort of
provisioning tool where you can use a more fine-grained
access/permissions control.
/tony
On Tue, 2019-09-17 at 06:29 +0000, kim.kargaard(a)noroff.no wrote:
Hi,
We are an Higher Education Institution and have set up oVirt 4.3 as a
Virtual Lab Environment, for both on-campus and distance learning
students. We have integrated AD and can log in with AD credentials
for users. However, I am struggling to find the right user role for
normal student users. Basically, they need to be able to do the
following:
1. Create a new VM and select from either a template or select an
uploaded ISO
2. Start the VM
3. Restart the VM
4. Shutdown the VM
5. Snapshot the VM
6. Connect to the VM using either spice or vnc/novnc
7. Create a disk
8. Connect to the student network (only would be preferable here) as
we have management networks that we dont want the students be be able
to see or select (if possible)
I have tested using the PowerUserRole, but that does not allow me to
select VNC/noVNC or spice and does not allow me to install from an
ISO, only a template. Any suggestions on role that I can give these
users?
Thanks.
Kind regards
Kim
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C2KCNPOR2V...
--
Tony Albers - Systems Architect - IT Development
Royal Danish Library, Victor Albecks Vej 1, 8000 Aarhus C, Denmark
Tel: +45 2566 2383 - CVR/SE: 2898 8842 - EAN: 5798000792142
12:15 p.m.
Hello Kim,
I think for this situation fits the VM portal and user permissions best.
You can use combination of built-in roles or create new one
(Administration -> Configure -> Roles -> New) with all permissions
combined. Users than log into VM portal and can see only VMs assigned to
them or that they've created. See the roles/permissions below.
Roles can be added for the user in global way or you can assign to the
datacenter or cluster.
On 9/17/19 8:29 AM, kim.kargaard(a)noroff.no wrote:
Hi,
We are an Higher Education Institution and have set up oVirt 4.3 as a Virtual Lab
Environment, for both on-campus and distance learning students. We have integrated AD and
can log in with AD credentials for users. However, I am struggling to find the right user
role for normal student users. Basically, they need to be able to do the following:
1. Create a new VM and select from either a template or select an uploaded ISO
Role: VmCreator
New: VM -> Provisioning Operations -> Create
Disk -> Provisioning Operations -> Create
2. Start the VM
3. Restart the VM
4. Shutdown the VM
Role: UserRole
New: VM -> Basic Operations
5. Snapshot the VM
Role: UserVmManager
New: VM -> Provisioning Operations -> Edit snapshots
6. Connect to the VM using either spice or vnc/novnc
Role:
UserRole
New: VM -> Administration Operations -> Connect to VM Serial Console
7. Create a disk
Role: VmCreator or DiskCreator
New: Disk -> Provisioning Operations -> Create
8. Connect to the student network (only would be preferable here) as
we have management networks that we dont want the students be be able to see or select (if
possible)
Not sure what does it mean connect to student network, but it could
solve to assign UserRole to the networks they can use.
I have tested using the PowerUserRole, but that does not allow me to select VNC/noVNC or
spice and does not allow me to install from an ISO, only a template. Any suggestions on
role that I can give these users?
Thanks.
Kind regards
Kim
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C2KCNPOR2V...
Best regards,
--
Lucie Leistnerova
Senior Quality Engineer, QE Cloud, RHVM
Red Hat EMEA
IRC: lleistne @ #rhev-qe
1893
days inactive
1893
days old
2 comments
3 participants
participants (3)
-
kim.kargaard＠noroff.no -
Lucie Leistnerova -
Tony Brian Albers