ManageIQ
Replies: 5 comments 7 replies
-
|
Hello everybody. Kind regards |
Beta Was this translation helpful? Give feedback.
-
|
@agrare Can you take a look here? |
Beta Was this translation helpful? Give feedback.
-
|
Hello there. I hope to be useful. kind regards. |
Beta Was this translation helpful? Give feedback.
-
|
Hey @cronosy, does this work with a full administrative user? VMware permissions get extremely complicated very quickly so our recommendation is to use an administrator.
This is actually only for smartstate analysis if you perform scans via the host. |
Beta Was this translation helpful? Give feedback.
-
You do not have to give user permissions on ESXi hosts unless you're using smartstate analysis. I would like to find a middle ground on user permissions maybe say all permissions recursively on a datacenter. The issue with adding roles only on a cluster is dvswitches and datastores live a level above so we get permissions failures trying to collect data / run operations that way. |
Beta Was this translation helpful? Give feedback.
-
|
Hi @agrare. Let me say that I add admin permissions to the user and finally the execution works. So, The user has the role admin in the cluster, without extend to GLOBAL, that mean that information related to datastores and Vswitch has not been extracted. Also, I could determine, that the buttons that execute the tasks are Power ON and Power OFF: I could figure out that last buttons belongs to VSphere operations and don't send the request to O.S or guest (I mean something with vmwaretools integration). In this stage, the next approach is determine the correct permissions are required enabling and disabling elements in the role. I'm going to let this discussion open and will share the elements enabled in the role when the operations works successfully. |
Beta Was this translation helpful? Give feedback.
-
|
Hey, yes all of these buttons are mapped to vmware API calls we don't send shutdown commands to the guest we let VMware handle ACPI shutdown if vmware tools are installed. |
Beta Was this translation helpful? Give feedback.
-
So after giving admin permissions to the user everything is working? |
Beta Was this translation helpful? Give feedback.
-
|
Yes, but click on Power Off, whenever click on shutdown guest don't execute. |
Beta Was this translation helpful? Give feedback.
-
|
Hello guys. finally I could obtain the wished setup. I want to share the required permission to execute virtual machines operations like start and stop: |
Beta Was this translation helpful? Give feedback.
-
|
That is great information thanks @cronosy ! I'll add to the documentation with the caveat that this set of permissions only works with a subset of MIQ functionality but might be sufficient for some use cases. |
Beta Was this translation helpful? Give feedback.
-
Greetings everyone.
Request your help one more time. I've been struggling to understand why the tasks like start,stop,reset on virtual machines fail with the error: ERROR -- evm: [Handsoap::Fault]: Handsoap::Fault { :code => 'ServerFaultCode', :reason => 'Permission to perform this operation was denied.' }
Method:[block (2 levels) in class:LogProxy]
I could certify that the user has permissions over the objects (at least using a common CURL REST API operation allow to the authenticated user execute those operations), but I understand that manageIQ use itself soap client. Then I would like to know if I need to add additional permissions to the user. Also I read the documentation to add a VMWare provider, and saw that I should authenticate to the ESX hosts. That step has not been executed, but I would like to understand whenever execute is mandatory and Why?
Thanks
Beta Was this translation helpful? Give feedback.
All reactions