[ovirt-users] Re: user role

[Lucie Leistnerova]

Hi Kim,

On 10/7/20 12:43 PM, kim.karga...@noroff.no wrote:

Hi all,

For a group of users added to ovirt through AD, which role should one add to an 
ISO for the group to be able to select an ISO when creating VM's in the VM 
portal?

UserRole should be enough, when the user has already VMCreator.


Thanks.

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RWER23VG3JXYJVTNIHLNJDEEXLB4TINK/


Best regards,

--

Lucie Leistnerova
Associate Manager, Quality Engineering, RHV - QE Core & Tools
GChat: lleistne @ Virtualization 

Red Hat EMEA 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GH3RZYBCDM6JQHPPDY6ZLXZZ47X5A5UM/

[ovirt-users] Re: user role

[Lucie Leistnerova]

Hello Kim,

I think for this situation fits the VM portal and user permissions best.

You can use combination of built-in roles or create new one 
(Administration -> Configure -> Roles -> New) with all permissions 
combined. Users than log into VM portal and can see only VMs assigned to 
them or that they've created. See the roles/permissions below.
Roles can be added for the user in global way or you can assign to the 
datacenter or cluster.


On 9/17/19 8:29 AM, kim.karga...@noroff.no wrote:

Hi,

We are an Higher Education Institution and have set up oVirt 4.3 as a Virtual 
Lab Environment, for both on-campus and distance learning students. We have 
integrated AD and can log in with AD credentials for users. However, I am 
struggling to find the right user role for normal student users. Basically, 
they need to be able to do the following:
1. Create a new VM and select from either a template or select an uploaded ISO


Role: VmCreator
New: VM -> Provisioning Operations -> Create
Disk -> Provisioning Operations -> Create


2. Start the VM
3. Restart the VM
4. Shutdown the VM


Role: UserRole
New: VM -> Basic Operations


5. Snapshot the VM


Role: UserVmManager
New: VM -> Provisioning Operations -> Edit snapshots


6. Connect to the VM using either spice or vnc/novnc

Role: UserRole
New: VM -> Administration Operations -> Connect to VM Serial Console

7. Create a disk

Role: VmCreator or DiskCreator
New: Disk -> Provisioning Operations -> Create

8. Connect to the student network (only would be preferable here) as we have 
management networks that we dont want the students be be able to see or select 
(if possible)
Not sure what does it mean connect to student network, but it could 
solve to assign UserRole to the networks they can use.


I have tested using the PowerUserRole, but that does not allow me to select 
VNC/noVNC or spice and does not allow me to install from an ISO, only a 
template. Any suggestions on role that I can give these users?

Thanks.

Kind regards

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C2KCNPOR2VTJVHZZSIXTVGC54RKDY3S/

Best regards,

--
Lucie Leistnerova
Senior Quality Engineer, QE Cloud, RHVM
Red Hat EMEA

IRC: lleistne @ #rhev-qe
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2VO47AP5GNMXXVXAHPPBOYBG4TNS3IAK/

[ovirt-users] Re: user role

[Tony Brian Albers]

Godmorgen Kim,

Not sure this is actually doable. IMO you're trying to make a kind of
not-really-admins. 

Others might have better ideas than me, but I'd look into some sort of
provisioning tool where you can use a more fine-grained
access/permissions control.

/tony


On Tue, 2019-09-17 at 06:29 +, kim.karga...@noroff.no wrote:
> Hi,
> 
> We are an Higher Education Institution and have set up oVirt 4.3 as a
> Virtual Lab Environment, for both on-campus and distance learning
> students. We have integrated AD and can log in with AD credentials
> for users. However, I am struggling to find the right user role for
> normal student users. Basically, they need to be able to do the
> following:
> 1. Create a new VM and select from either a template or select an
> uploaded ISO
> 2. Start the VM
> 3. Restart the VM
> 4. Shutdown the VM
> 5. Snapshot the VM
> 6. Connect to the VM using either spice or vnc/novnc
> 7. Create a disk
> 8. Connect to the student network (only would be preferable here) as
> we have management networks that we dont want the students be be able
> to see or select (if possible)
> 
> I have tested using the PowerUserRole, but that does not allow me to
> select VNC/noVNC or spice and does not allow me to install from an
> ISO, only a template. Any suggestions on role that I can give these
> users?
> 
> Thanks.
> 
> Kind regards
> 
> Kim
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C2KCNPOR2VTJVHZZSIXTVGC54RKDY3S/
-- 
Tony Albers - Systems Architect - IT Development
Royal Danish Library, Victor Albecks Vej 1, 8000 Aarhus C, Denmark
Tel: +45 2566 2383 - CVR/SE: 2898 8842 - EAN: 5798000792142
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5BOKYBBYIOSHZAH6VUNSJUIZBHMOFDHU/