Hi,

Assigning the uservmManager role on a VM for an oVirt user or for an oVirt  group that the user belongs to - should have the same result of course.

Are you sure that the logged in user is a member of a group on oVirt? Please note that users and groups associations defined in Keycloak are not automatically synced to oVirt.
Check this thread for more details:  [1]

[1] https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z4AD6WSXYN36K7EVFU7VBXMQKGY474ET/

Thanks,
Sharon


On Tue, May 9, 2023 at 11:01 AM Christoph Köhler <koehler@luis.uni-hannover.de> wrote:
Hi,

I found out the following: The logged in user is member of a group, that
has uservmManager on a VM. User sees the VM without an appearing pen
that indicates snapshot operations. The group comes from Keycloak
respectively from LDAP. When I stick the single user to the VM with
identical rights like the group, than the pen comes for doing snapshots.

That is the situation for our users...

Greetings!
Chris

On 08.05.23 17:20, Sharon Gratch wrote:
> Hi,
>
> Do the snapshot operations buttons (create, delete, restore) appear but
> grayed out or do they not appear at all?
>
> If they don't appear at all then this seems like a permission issue. Can
> you please assure that the logged in user is assigned with either
> UserVmManager or SuperUser**roles for those VMs on the relevant VM level
> or VM's data center/cluster level?
> It might be that importing those VMs, removed those permissions for the
> VMs.
>
> If the snapshot operations buttonsappear but grayed out then this
> implies that the disk images or snapshots are locked due to a previous
> VM operation.
>
> Thanks,
> Sharon
>
>
> On Mon, May 8, 2023 at 3:24 PM Christoph Köhler
> <koehler@luis.uni-hannover.de <mailto:koehler@luis.uni-hannover.de>> wrote:
>
>     Hi!
>
>     On a fresh Version 4.5.4-1.el8: in the vm portal are no snapshot
>     operations possible - not for an user_vm_manager and not for a
>     super_user. We have imported VMs from 4.3 with exisiting snapshots.
>     These are listed for the users in the snapshot box but there is also no
>     operation possible for them.
>
>     Does anyone has a hint?
>
>     Greetings!
>     Chris
>     _______________________________________________
>     Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
>     To unsubscribe send an email to users-leave@ovirt.org
>     <mailto:users-leave@ovirt.org>
>     Privacy Statement: https://www.ovirt.org/privacy-policy.html
>     <https://www.ovirt.org/privacy-policy.html>
>     oVirt Code of Conduct:
>     https://www.ovirt.org/community/about/community-guidelines/
>     <https://www.ovirt.org/community/about/community-guidelines/>
>     List Archives:
>     https://lists.ovirt.org/archives/list/users@ovirt.org/message/CEU6Y74NYIAWURVKL3SMTVR4RQDPP6AJ/ <https://lists.ovirt.org/archives/list/users@ovirt.org/message/CEU6Y74NYIAWURVKL3SMTVR4RQDPP6AJ/>
>
>
> _______________________________________________
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-leave@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/RK6XGMG7JFCVZNBBW37HCRPT57ASP2VB/