<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Sat, May 20, 2017 at 12:15 AM, Peter Wood <span dir="ltr"><<a href="mailto:peterwood.sd@gmail.com" target="_blank">peterwood.sd@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I did create a bug report and it was closed with the explanation that UserVmManager role is not assigned because I'm using the Administration portal... (???). What other portal do I use? Import/Export is Admin type operation.<div><br></div><div>See here:</div><div><a href="https://bugzilla.redhat.com/show_bug.cgi?id=1451501" target="_blank">https://bugzilla.redhat.com/<wbr>show_bug.cgi?id=1451501</a><br></div><div><br></div><div><br></div><div>Very simple steps to test it:</div><div><br></div><div><div>- Create a local user called LocalUserA</div><div><br></div><div>- Grant permissions to create VMs in DEV1 cluster and Import/Export VMs:</div><div><br></div><div>LocalUserA -> [PowerUserRole] -> DEV1 (Cluster)</div><div>LocalUserA -> [PowerUserRole] -> SAN (Storage Data Master)</div><div>LocalUserA -> [VmImporterExporter] -> DEV1 (Cluster)</div><div>LocalUserA -> [VmImporterExporter] -> SAN (Storage Data Master)</div><div>LocalUserA -> [VmImporterExporter] -> SD-Export (Storage Export type)</div><div><br></div><div>- Login to the Administration Portal as LocalUserA@internal</div><div><br></div><div>- Create a VM, Export the VM, Import the VM</div><div><br></div><div> Role UserVmManager is not set for the imported VM.</div><div> User LocalUserA can not even boot up the VM due to insufficient permissions.</div><div><br></div><div>How do I setup LocalUserA so it can import VMs and work with them?</div></div><div><br></div></div></blockquote><div><br></div><div>Thanks for this information Peter.</div><div>I proposed a patch. Let's discuss it in bugzilla.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div></div><div>Thank you,</div><div><br></div><div>-- Peter</div><div><br></div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, May 16, 2017 at 4:11 AM, Arik Hadas <span dir="ltr"><<a href="mailto:ahadas@redhat.com" target="_blank">ahadas@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote"><span>On Mon, May 15, 2017 at 11:36 PM, Peter Wood <span dir="ltr"><<a href="mailto:peterwood.sd@gmail.com" target="_blank">peterwood.sd@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>I have a group of local users with permissions to create VMs, templates, and VMs from templates. They are allowed to work only in one of the clusters in the datacenter.</div><div><br></div><div>Now I want one of the local users to be able to import VMs and convert them into templates and I just can't find the recipe for that.</div><div><br></div><div>The group has these permissions:</div><div><br></div><div>LocalUsersGroup -> [PowerUserRole] -> DEV1 (Cluster)</div><div>LocalUsersGroup -> [PowerUserRole] -> SAN (Storage)<br></div><div>LocalUsersGroup -> [TemplateCreator] -> OFFICE (Datacenter)<br></div><div><br></div><div>LocalUserA is part of LocalUsersGroup and should be able to:</div><div> - Import a VM</div><div> - Convert the VM to a template for everyone to use</div><div> - Delete the VM</div><div><br></div><div>I tried this: LocalUserA -> [VmImporterExporter] -> System</div><div><br></div><div>LocalUserA can now import VMs and convert them to templates but it can't delete the imported VMs. For some reason [UserVmManager] role is not assigned to LocalUserA on the VMs that were imported.</div></div></blockquote><div><br></div></span><div>Right, that seems to be a bug. The import operation should set the user that executes it with UserVmManager role on the imported VM, just like add VM does for regular VM creation.</div><div>Could you please file a bug?</div><span><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr"><div><br></div><div>Before I start messing around I'd appreciate somebody's else opinion on how this should be done.</div><div> <br></div></div></blockquote></span><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span><div dir="ltr"><div></div><div>Thank you for your time,</div><div><br></div><div>-- Peter</div><div><br></div><div><br></div></div>
<br></span>______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman<wbr>/listinfo/users</a><br>
<br></blockquote></div><br></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div></div>