Thanks Greg. Adding the UserRole on the on specific VMs works. I didn’t know that the workflow is to have then VMs we intend to assign created prior to granting users access to the UI (system). I was going about it the opposite way. I still think there’s an issue because assignment of the PowerUserRole behaves differently. Users with this role can be granted UI access first, and later be assigned specific VMs. Thanks again for your help. Andrew
On Feb 10, 2019, at 17:40, Greg Sheremeta <gshereme@redhat.com> wrote:
On Sun, Feb 10, 2019 at 3:34 AM Andrew X <aerianis@gmail.com> wrote: Hi Everyone,
Whenever I add a new user and give them system permission with the UserRole, they can see all VMs in the data center. I can only control what VMs a user have access to if their role to access the system was set to PowerUserRole.
I've tried this on fresh installs and still the same result - with both internal and LDAP users.
Can someone help to let me know what I'm doing wrong?
Sure :) Are you setting UserRole on the actual System object? "System" is everything, so that's not what you want. Go to the specific VMs you want, Permissions, and add UserRole there.
Best wishes, Greg
Thanks. _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/LUILF3MUTD2Z5U...
-- GREG SHEREMETA SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX Red Hat NA
gshereme@redhat.com IRC: gshereme