Hello Kim, I think for this situation fits the VM portal and user permissions best. You can use combination of built-in roles or create new one (Administration -> Configure -> Roles -> New) with all permissions combined. Users than log into VM portal and can see only VMs assigned to them or that they've created. See the roles/permissions below. Roles can be added for the user in global way or you can assign to the datacenter or cluster. On 9/17/19 8:29 AM, kim.kargaard@noroff.no wrote:
Hi,
We are an Higher Education Institution and have set up oVirt 4.3 as a Virtual Lab Environment, for both on-campus and distance learning students. We have integrated AD and can log in with AD credentials for users. However, I am struggling to find the right user role for normal student users. Basically, they need to be able to do the following: 1. Create a new VM and select from either a template or select an uploaded ISO
Role: VmCreator New: VM -> Provisioning Operations -> Create Disk -> Provisioning Operations -> Create
2. Start the VM 3. Restart the VM 4. Shutdown the VM
Role: UserRole New: VM -> Basic Operations
5. Snapshot the VM
Role: UserVmManager New: VM -> Provisioning Operations -> Edit snapshots
6. Connect to the VM using either spice or vnc/novnc Role: UserRole New: VM -> Administration Operations -> Connect to VM Serial Console 7. Create a disk Role: VmCreator or DiskCreator New: Disk -> Provisioning Operations -> Create 8. Connect to the student network (only would be preferable here) as we have management networks that we dont want the students be be able to see or select (if possible) Not sure what does it mean connect to student network, but it could solve to assign UserRole to the networks they can use.
I have tested using the PowerUserRole, but that does not allow me to select VNC/noVNC or spice and does not allow me to install from an ISO, only a template. Any suggestions on role that I can give these users?
Thanks.
Kind regards
Kim _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C2KCNPOR2VTJV... Best regards,
-- Lucie Leistnerova Senior Quality Engineer, QE Cloud, RHVM Red Hat EMEA IRC: lleistne @ #rhev-qe