[ovirt-users] extra permissions required to start VM via ovirt-shell?

[Ondra Machacek]

Hello,

when using user roles (not admin ones) you have to use filter
parameter. So you need to start the ovirt-shell similar to this:

   $ ovirt-shell --filter --username=...  --url=... --ca-file=...

On 11/09/2016 10:49 PM, Derek Atkins wrote:
> Hi,
>
> I created a user and a new user role, VmStarter, that has two permissions:
>   System -> Configure System -> Login Permissions
>   VM -> Basic Operations -> Run VM
>
> I assigned this new user to this role at the data center.
>
> If I login to the user portal with this user I get a screen with all
> my VMs, and if a VM is down I can click on the "run" button and it will
> start.  If a machine is running I cannot click on the stop button (well,
> I can, but I get a permission denied error, which is expected).  So it
> sounds like everything is working.
>
> Now I want to use ovirt-shell to do the same thing.  I can login just
> fine using this user's credentials, and I get connected.  However when I
> execute the command to start a VM:
>
>   [oVirt shell (connected)]# action vm vm-0 start
>
> I get this error:
>
>   ==================================== ERROR =================================
>   status: 400
>   reason: Bad Request
>   detail: query execution failed due to insufficient permissions.
>   ============================================================================
>
> This seems to imply I'm missing a permission.  But I have no idea what
> permission I'm missing.  I haven't found anything in the engine log that
> would help me.
>
> Any ideas what's wrong and (more importantly) how to fix it?
>
> Thanks,
>
> -derek
>