
Hi, I am contacting you because I can not do what I want. I have a hosted-engine. I have a data center with a cluster that has two nodes. I have a ipa-server for authentication. I want a user can create VMs. I would like he could just manage its VMs and not see others. And more, I would like to put a quota per user. Is it possible today? Thx, Kevin.

Hi Kevin, On 04/03/2014 04:11 PM, Kevin Tibi wrote:
Hi,
I am contacting you because I can not do what I want. I have a hosted-engine. I have a data center with a cluster that has two nodes. I have a ipa-server for authentication. I want a user can create VMs. I would like he could just manage its VMs and not see others. And more, I would like to put a quota per user.
You can assign quotas per user. Quotas are disabled per default, so you have to enabled it for your datacenter. I also suggest to assign permissions for your users to self provisioning portal, then they can only see/create/start/stop their vms. In webadmin portal users can always see all vms. Regards, René
Is it possible today?
Thx, Kevin.
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

On 04/03/2014 06:19 PM, René Koch wrote:
Hi Kevin,
On 04/03/2014 04:11 PM, Kevin Tibi wrote:
Hi,
I am contacting you because I can not do what I want. I have a hosted-engine. I have a data center with a cluster that has two nodes. I have a ipa-server for authentication. I want a user can create VMs. I would like he could just manage its VMs and not see others. And more, I would like to put a quota per user.
You can assign quotas per user. Quotas are disabled per default, so you have to enabled it for your datacenter.
I also suggest to assign permissions for your users to self provisioning portal, then they can only see/create/start/stop their vms. In webadmin portal users can always see all vms.
which would be done by assigning the user from IPA a "Power User" UserRole at the DC level, then enabling quota on the DC, then creating a quota, and giving that user a permission to consume it. did you add the IPA domain to the engine via the engine-manage-domains utility?
Regards, René
Is it possible today?
Thx, Kevin.
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Yes with engine-manage-domains. It's work perfectly. Thx for your help :) 2014-04-04 14:56 GMT+02:00 Itamar Heim <iheim@redhat.com>:
On 04/03/2014 06:19 PM, René Koch wrote:
Hi Kevin,
On 04/03/2014 04:11 PM, Kevin Tibi wrote:
Hi,
I am contacting you because I can not do what I want. I have a hosted-engine. I have a data center with a cluster that has two nodes. I have a ipa-server for authentication. I want a user can create VMs. I would like he could just manage its VMs and not see others. And more, I would like to put a quota per user.
You can assign quotas per user. Quotas are disabled per default, so you have to enabled it for your datacenter.
I also suggest to assign permissions for your users to self provisioning portal, then they can only see/create/start/stop their vms. In webadmin portal users can always see all vms.
which would be done by assigning the user from IPA a "Power User" UserRole at the DC level, then enabling quota on the DC, then creating a quota, and giving that user a permission to consume it.
did you add the IPA domain to the engine via the engine-manage-domains utility?
Regards, René
Is it possible today?
Thx, Kevin.
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
participants (3)
-
Itamar Heim
-
Kevin Tibi
-
René Koch