[ovirt-users] Re: Why do users with UserRole see all VMs
Thanks Greg. Adding the UserRole on the on specific VMs works.
I didn’t know that the workflow is to have then VMs we intend to assign created prior to
granting users access to the UI (system). I was going about it the opposite way.
I still think there’s an issue because assignment of the PowerUserRole behaves
differently. Users with this role can be granted UI access first, and later be assigned
specific VMs.
Thanks again for your help.
Andrew
On Feb 10, 2019, at 17:40, Greg Sheremeta <gshereme(a)redhat.com>
wrote:
> On Sun, Feb 10, 2019 at 3:34 AM Andrew X <aerianis(a)gmail.com> wrote:
> Hi Everyone,
>
> Whenever I add a new user and give them system permission with the UserRole, they can
see all VMs in the data center. I can only control what VMs a user have access to if their
role to access the system was set to PowerUserRole.
>
> I've tried this on fresh installs and still the same result - with both internal
and LDAP users.
>
> Can someone help to let me know what I'm doing wrong?
Sure :) Are you setting UserRole on the actual System object? "System" is
everything, so that's not what you want.
Go to the specific VMs you want, Permissions, and add UserRole there.
Best wishes,
Greg
>
> Thanks.
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LUILF3MUTD2...
--
GREG SHEREMETA
SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX
Red Hat NA
gshereme(a)redhat.com IRC: gshereme
Attachments:
- attachment.html (text/html — 4.6 KB)