Hello, There is something I don't understand in permissions. I'm using Ovirt 4.2.3.5-1. I created a user : - ovirt-aaa-jdbc-tool user add etudiant2 --attribute=firstName=Etudiant2 --attribute=lastName=Etudiant2-Lastname - ovirt-aaa-jdbc-tool user password-reset etudiant2 --password-valid-to="2025-01-01 10:30:00Z" On the Administration Portal I gave him (etudiant2) the permission UserVmManager on only one VM and nothing else. But when he logs in the VM Portal he can view, start, stop all the VM. I think it's because all users are member of the group Everyone and this group has by default the UserRole. And in my config (the default/install config) the UserRole can do Basic Operation an VM. Moreover the UserRole is given to the group Everyone on all VM I created, and I can't remove this permission (Remove button is greyed). How can I make a VM "private", only visible by one user ? Thanks in advance, Florent