<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[API authentication token permissions]]></title><description><![CDATA[<p dir="auto">Hi!</p>
<p dir="auto">As of now, I need to give my API users admin privileges to read host statistics. It would be useful to have a less privileged user role for this as we really don't want all API users to have full admin.</p>
<p dir="auto">Is this on the roadmap?</p>
]]></description><link>https://xcp-ng.org/forum/topic/11906/api-authentication-token-permissions</link><generator>RSS for Node</generator><lastBuildDate>Tue, 18 Aug 2026 06:06:07 GMT</lastBuildDate><atom:link href="https://xcp-ng.org/forum/topic/11906.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 25 Feb 2026 08:57:58 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to API authentication token permissions on Fri, 29 May 2026 10:01:22 GMT]]></title><description><![CDATA[<p dir="auto">Hi <a class="plugin-mentions-user plugin-mentions-a" href="/forum/user/halvor" aria-label="Profile: halvor">@<bdi>halvor</bdi></a>,<br />
FYI, ACL V2 / RBAC is now available in the REST API.</p>
<p dir="auto">You can create a privilege that only give you read privilege on your host.<br />
You can see the <a href="https://docs.xen-orchestra.com/xo6/acl-v2" target="_blank" rel="noopener noreferrer nofollow ugc">RBAC doc</a>.<br />
A dedicated thread is available on the forum <a href="https://xcp-ng.org/forum/topic/12036/acl-v2-we-need-your-feedbacks?_=1780048618957">thread</a>, please feel free to share your feedback.</p>
<p dir="auto">Thank you.</p>
]]></description><link>https://xcp-ng.org/forum/post/105819</link><guid isPermaLink="true">https://xcp-ng.org/forum/post/105819</guid><dc:creator><![CDATA[MathieuRA]]></dc:creator><pubDate>Fri, 29 May 2026 10:01:22 GMT</pubDate></item><item><title><![CDATA[Reply to API authentication token permissions on Sat, 28 Feb 2026 20:33:17 GMT]]></title><description><![CDATA[<p dir="auto">I know it's actively worked as we speak (ACLv2). So I would say this year at least <img src="https://xcp-ng.org/forum/assets/plugins/nodebb-plugin-emoji/emoji/android/1f61b.png?v=f084dd9e819" class="not-responsive emoji emoji-android emoji--stuck_out_tongue" style="height:23px;width:auto;vertical-align:middle" title=":p" alt="😛" /> It's in our (soon published) roadmap in the "Next" section, just after the "now".</p>
]]></description><link>https://xcp-ng.org/forum/post/103083</link><guid isPermaLink="true">https://xcp-ng.org/forum/post/103083</guid><dc:creator><![CDATA[olivierlambert]]></dc:creator><pubDate>Sat, 28 Feb 2026 20:33:17 GMT</pubDate></item><item><title><![CDATA[Reply to API authentication token permissions on Fri, 27 Feb 2026 18:08:37 GMT]]></title><description><![CDATA[<p dir="auto">Doh. I <em>just</em> posted a feature request on the github repo for XOA for this exact thing. Can you make a guess on a timeline?</p>
]]></description><link>https://xcp-ng.org/forum/post/103066</link><guid isPermaLink="true">https://xcp-ng.org/forum/post/103066</guid><dc:creator><![CDATA[randyrue]]></dc:creator><pubDate>Fri, 27 Feb 2026 18:08:37 GMT</pubDate></item><item><title><![CDATA[Reply to API authentication token permissions on Wed, 25 Feb 2026 09:20:52 GMT]]></title><description><![CDATA[<p dir="auto">Aha! I will move to prometheus in the future, but at the moment it is more basic.</p>
<p dir="auto">Thank you!</p>
]]></description><link>https://xcp-ng.org/forum/post/102929</link><guid isPermaLink="true">https://xcp-ng.org/forum/post/102929</guid><dc:creator><![CDATA[halvor]]></dc:creator><pubDate>Wed, 25 Feb 2026 09:20:52 GMT</pubDate></item><item><title><![CDATA[Reply to API authentication token permissions on Wed, 25 Feb 2026 09:03:51 GMT]]></title><description><![CDATA[<ol>
<li>Yes it's planned</li>
<li>You already can use our openAPI for Prometheus to scrap and have permissions managed in Grafana <img src="https://xcp-ng.org/forum/assets/plugins/nodebb-plugin-emoji/emoji/android/1f642.png?v=f084dd9e819" class="not-responsive emoji emoji-android emoji--slightly_smiling_face" style="height:23px;width:auto;vertical-align:middle" title=":)" alt="🙂" /></li>
</ol>
]]></description><link>https://xcp-ng.org/forum/post/102927</link><guid isPermaLink="true">https://xcp-ng.org/forum/post/102927</guid><dc:creator><![CDATA[olivierlambert]]></dc:creator><pubDate>Wed, 25 Feb 2026 09:03:51 GMT</pubDate></item></channel></rss>