Hi, We are an Higher Education Institution and have set up oVirt 4.3 as a Virtual Lab Environment, for both on-campus and distance learning students. We have integrated AD and can log in with AD credentials for users. However, I am struggling to find the right user role for normal student users. Basically, they need to be able to do the following: 1. Create a new VM and select from either a template or select an uploaded ISO 2. Start the VM 3. Restart the VM 4. Shutdown the VM 5. Snapshot the VM 6. Connect to the VM using either spice or vnc/novnc 7. Create a disk 8. Connect to the student network (only would be preferable here) as we have management networks that we dont want the students be be able to see or select (if possible) I have tested using the PowerUserRole, but that does not allow me to select VNC/noVNC or spice and does not allow me to install from an ISO, only a template. Any suggestions on role that I can give these users? Thanks. Kind regards Kim
Godmorgen Kim, Not sure this is actually doable. IMO you're trying to make a kind of not-really-admins. Others might have better ideas than me, but I'd look into some sort of provisioning tool where you can use a more fine-grained access/permissions control. /tony On Tue, 2019-09-17 at 06:29 +0000, kim.kargaard@noroff.no wrote:
Hi,
We are an Higher Education Institution and have set up oVirt 4.3 as a Virtual Lab Environment, for both on-campus and distance learning students. We have integrated AD and can log in with AD credentials for users. However, I am struggling to find the right user role for normal student users. Basically, they need to be able to do the following: 1. Create a new VM and select from either a template or select an uploaded ISO 2. Start the VM 3. Restart the VM 4. Shutdown the VM 5. Snapshot the VM 6. Connect to the VM using either spice or vnc/novnc 7. Create a disk 8. Connect to the student network (only would be preferable here) as we have management networks that we dont want the students be be able to see or select (if possible)
I have tested using the PowerUserRole, but that does not allow me to select VNC/noVNC or spice and does not allow me to install from an ISO, only a template. Any suggestions on role that I can give these users?
Thanks.
Kind regards
Kim _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C2KCNPOR2VTJV... -- Tony Albers - Systems Architect - IT Development Royal Danish Library, Victor Albecks Vej 1, 8000 Aarhus C, Denmark Tel: +45 2566 2383 - CVR/SE: 2898 8842 - EAN: 5798000792142
Hello Kim, I think for this situation fits the VM portal and user permissions best. You can use combination of built-in roles or create new one (Administration -> Configure -> Roles -> New) with all permissions combined. Users than log into VM portal and can see only VMs assigned to them or that they've created. See the roles/permissions below. Roles can be added for the user in global way or you can assign to the datacenter or cluster. On 9/17/19 8:29 AM, kim.kargaard@noroff.no wrote:
Hi,
We are an Higher Education Institution and have set up oVirt 4.3 as a Virtual Lab Environment, for both on-campus and distance learning students. We have integrated AD and can log in with AD credentials for users. However, I am struggling to find the right user role for normal student users. Basically, they need to be able to do the following: 1. Create a new VM and select from either a template or select an uploaded ISO
Role: VmCreator New: VM -> Provisioning Operations -> Create Disk -> Provisioning Operations -> Create
2. Start the VM 3. Restart the VM 4. Shutdown the VM
Role: UserRole New: VM -> Basic Operations
5. Snapshot the VM
Role: UserVmManager New: VM -> Provisioning Operations -> Edit snapshots
6. Connect to the VM using either spice or vnc/novnc Role: UserRole New: VM -> Administration Operations -> Connect to VM Serial Console 7. Create a disk Role: VmCreator or DiskCreator New: Disk -> Provisioning Operations -> Create 8. Connect to the student network (only would be preferable here) as we have management networks that we dont want the students be be able to see or select (if possible) Not sure what does it mean connect to student network, but it could solve to assign UserRole to the networks they can use.
I have tested using the PowerUserRole, but that does not allow me to select VNC/noVNC or spice and does not allow me to install from an ISO, only a template. Any suggestions on role that I can give these users?
Thanks.
Kind regards
Kim _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C2KCNPOR2VTJV... Best regards,
-- Lucie Leistnerova Senior Quality Engineer, QE Cloud, RHVM Red Hat EMEA IRC: lleistne @ #rhev-qe
participants (3)
-
kim.kargaard＠noroff.no -
Lucie Leistnerova -
Tony Brian Albers