Hello. I am using oVirt 4.2.6.4. I have added successfully one Centos 7.5 host. I am trying to create a new Storage Domain to add a local storage device on the host which has an iSCSI target configured on top. Everything seems to proceed fine, iSCSI target is discovered by oVirt and LUN is added and then when I click the OK button the operation fails and shows a user authentication error message which doesn't make any sense since I am logged-in in oVirt as an administrator. Here are the relevant lines from the ovirt engine log file. Any help appreciated: 2018-10-30 06:26:32,492-04 WARN [org.ovirt.engine.core.bll.storage.domain.AddSANStorageDomainCommand] (default task-13) [da237443-21e0-4777-a0d4-3c6ecf6c63bd] Validation of action 'AddSANStorageDomain' failed for user admin@internal-authz. Reasons: VAR__TYPE__STORAGE__DOMAIN,VAR__ACTION__ADD,ACTION_TYPE_FAILED_DISCARD_AFTER_DELETE_NOT_SUPPORTED_BY_UNDERLYING_STORAGE,$storageDomainName VicinityStorageDomain 2018-10-30 06:26:32,713-04 INFO [org.ovirt.engine.core.bll.storage.domain.AttachStorageDomainToPoolCommand] (default task-13) [772f360b-453c-407a-90ac-b28a3915e377] No permission found for user '0ad3bf0c-d5e1-11e8-afa0-005056af2f08' or one of the groups he is member of, when running action 'AttachStorageDomainToPool', Required permissions are: Action type: 'ADMIN' Action group: 'MANIPULATE_STORAGE_DOMAIN' Object type: 'Storage' Object ID: 'null'. 2018-10-30 06:26:32,713-04 WARN [org.ovirt.engine.core.bll.storage.domain.AttachStorageDomainToPoolCommand] (default task-13) [772f360b-453c-407a-90ac-b28a3915e377] Validation of action 'AttachStorageDomainToPool' failed for user admin@internal-authz. Reasons: VAR__TYPE__STORAGE__DOMAIN,VAR__ACTION__ATTACH,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION A few extra minor issues that manifest after clicking OK is that I get a warning that the underlying device does not support discard after delete, even though I had that unchecked in the previous dialogue window and then I get a warning that the LUN exists already (doesn't make sense since the new Storage Domain was never created). Moreover the iSCSI initiator that oVirt created on my host is still there and I have to tear it down manually.