Hi Kim, If you add them to a group in AD then add the users and group to oVirt you can add the permissions to the group. Then add the VmCreator and DiskProfileUser to the Datacenter. Add the UserTemplateBasedVM permission to any templates you want them to be able to use Add the VnicProfileUser permission to any vNIC profiles they should have access ( make sure public isn't enabled on any vNIC profiles you don't want them to have access to) When they create a VM they will then get UserVmManager permission and the DiskOperator permissions on any disks. This means they should be able to do all 1 to 8 for their own VMs and also delete their VMs and Disks. Paul Staniforth To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/