<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Hello Kristian,</p>
<p><br>
</p>
<p>I haven't upgraded to 4.2 yet but in 4.1 </p>
<p><br>
</p>
<p>I create a Directory services group and add the user to it</p>
<p>Then I give the user roles </p>
<p><br>
</p>
<p>VmCreator <br>
</p>
<p>DiskProfileUser</p>
<p>VnicProfileUser </p>
<p><br>
</p>
<p>These can be added to a DC, storage domain, cluster, etc.</p>
<p><br>
</p>
<p>The VnicProfileUser means that you can restrict networks and impose QOS, Network Filters,etc.</p>
<p><br>
</p>
<p>We then add UserTemplateBasedVm permission to give them access to specific templates.</p>
<p><br>
</p>
<p>For users we allow to create templates we add TemplateCreator permission to their group.</p>
<p><br>
</p>
<p>These are all user permissions so they can't login to the admin portal.</p>
<p><br>
</p>
<p>Regards,</p>
<p> Paul S. <br>
</p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> users-bounces@ovirt.org <users-bounces@ovirt.org> on behalf of Kristian Petersen <nesretep@chem.byu.edu><br>
<b>Sent:</b> 01 May 2018 16:36<br>
<b>To:</b> users<br>
<b>Subject:</b> [ovirt-users] User portal permissions</font>
<div> </div>
</div>
<div>
<div dir="ltr">I have a user that I want to be able to create VMs, create and attach disks to the new VM, add a network interface to the VM, and get the OS installed so it is ready to use. I am completely confused on which role (or roles) this user would need
to do that without making them an admin. Can someone give me some guidance here?<br clear="all">
<div><br>
</div>
-- <br>
<div class="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">Kristian Petersen
<div>System Administrator</div>
<div>BYU Dept. of Chemistry and Biochemistry</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
To view the terms under which this email is distributed, please go to:- <br>
<a href="http://disclaimer.leedsbeckett.ac.uk/disclaimer/disclaimer.html" target="_blank">http://disclaimer.leedsbeckett.ac.uk/disclaimer/disclaimer.html</a>
<p></p>
</body>
</html>