Permissions Make No Sense
-
@jimmymiller said in Permissions Make No Sense:
@DustinB
Does the Self Service resource sets not cover your needs? I understand wanting to limit resources so they don't impact others, but pinning down to a specific host that may be a part of a larger pool can make ACLs ugly. Especially when you enable HA or Plans/DRS. If you aren't planning to enable those features, why not leave the host as an independent pool and give them access that way?No, SS doesn't address the ask.
-
@DustinB So what features about the pool are you wanting to use that you can't just give them access to the individual host (i.e. as a single host pool)?
-
I agree, got a similar dilemma now.
Required to grant permissions to single host (gpu computing) and ability to create\remove VMs.But it looks it no ACL for VM creation, it available only for global admin\pool admin accounts. So only way is setup standalone XO for each single host? This way i lose the pool storage and VM migration.
-
@Tristis-Oris said in Permissions Make No Sense:
I agree, got a similar dilemma now.
Required to grant permissions to single host (gpu computing) and ability to create\remove VMs.But it looks it no ACL for VM creation, it available only for global admin\pool admin accounts. So only way is setup standalone XO for each single host? This way i lose the pool storage and VM migration.
I'm glad someone else came across the same issue I was encountering (still don't have a solution) but maybe the vates team is working on it.
-
If you want to get more than permission on existing objects, you need to use the self service, it's made exactly for that.
-
@olivierlambert but, what is this?) i see nothing at docs.
ah. this self service, not a build-in acl group.That mean i need to create some VM templates and share them to user, but even devs don't know what they will need.
This more a bout resource limitation, which is not my task. Or i'm wrong? -
@Tristis-Oris you can read up on it here, https://xen-orchestra.com/docs/users.html#self-service-portal
While Self-Service might "scratch the itch" I've been able to talk my team off the edge and just let me manage the environment and grant them access to the VM's through other means.
-
@DustinB yeah i already remember about that button. Still not sure is it suitiable for me. Need to check it again.
-
yes, it almost what i need, really great. But you can't setup host affinity via self-service VM creation. Since i have different GPU on hosts, some persons required only 1 host from the whole pool.
self
basic admin
-
you can't configure vGPU limitation at self-service rule, but user can select vGPU at VM creation based on that rule. So it would be unlimited. But i can't really check it with my nvidia cards.
and what is
Share this VM?
