Thanks Greg. Adding the UserRole on the on specific VMs works.

I didn’t know that the workflow is to have then VMs we intend to assign created prior to granting users access to the UI (system). I was going about it the opposite way. 

I still think there’s an issue because assignment of the PowerUserRole behaves differently.  Users with this role can be granted UI access first, and later be assigned specific VMs.

Thanks again for your help.
Andrew 


On Feb 10, 2019, at 17:40, Greg Sheremeta <gshereme@redhat.com> wrote:



On Sun, Feb 10, 2019 at 3:34 AM Andrew X <aerianis@gmail.com> wrote:
Hi Everyone,

Whenever I add a new user and give them system permission with the UserRole, they can see all VMs in the data center. I can only control what VMs a user have access to if their role to access the system was set to PowerUserRole.

I've tried this on fresh installs and still the same result - with both internal and LDAP users.

Can someone help to let me know what I'm doing wrong?

Sure :) Are you setting UserRole on the actual System object? "System" is everything, so that's not what you want.
Go to the specific VMs you want, Permissions, and add UserRole there.

Best wishes,
Greg

 

Thanks.
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/LUILF3MUTD2Z5URAMPKH3BR4SPKQOCJF/


--

GREG SHEREMETA

SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX

Red Hat NA

gshereme@redhat.com    IRC: gshereme