[ovirt-users] Permissions to Import VMs

[Arik Hadas]

On Mon, May 15, 2017 at 11:36 PM, Peter Wood <peterwood.sd at gmail.com> wrote:

> Hi,
>
> I have a group of local users with permissions to create VMs, templates,
> and VMs from templates. They are allowed to work only in one of the
> clusters in the datacenter.
>
> Now I want one of the local users to be able to import VMs and convert
> them into templates and I just can't find the recipe for that.
>
> The group has these permissions:
>
> LocalUsersGroup -> [PowerUserRole] -> DEV1 (Cluster)
> LocalUsersGroup -> [PowerUserRole] -> SAN (Storage)
> LocalUsersGroup -> [TemplateCreator] -> OFFICE (Datacenter)
>
> LocalUserA is part of LocalUsersGroup and should be able to:
>   - Import a VM
>   - Convert the VM to a template for everyone to use
>   - Delete the VM
>
> I tried this: LocalUserA -> [VmImporterExporter] -> System
>
> LocalUserA can now import VMs and convert them to templates but it can't
> delete the imported VMs. For some reason [UserVmManager] role is not
> assigned to LocalUserA on the VMs that were imported.
>

Right, that seems to be a bug. The import operation should set the user
that executes it with UserVmManager role on the imported VM, just like add
VM does for regular VM creation.
Could you please file a bug?


>
> Before I start messing around I'd appreciate somebody's else opinion on
> how this should be done.
>
>
Thank you for your time,
>
> -- Peter
>
>
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20170516/f5049b14/attachment.html>