<div dir="ltr">Hi<div><br></div><div>Probably, the following may work...</div><div><br></div><div>oneacl create "#<user_id> USER/* CREATE"</div><div>oneacl create "#<user_id> USER/* USE+MANAGE+ADMIN"<br>
</div><div><br></div><div>Take a look to the ACL guide for more info:</div><div><br></div><div><a href="http://docs.opennebula.org/4.4/administration/users_and_groups/manage_acl.html">http://docs.opennebula.org/4.4/administration/users_and_groups/manage_acl.html</a><br>
</div><div><br></div><div>Cheers</div><div><br></div><div>Ruben</div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Apr 3, 2014 at 12:08 PM, Wilma Hermann <span dir="ltr"><<a href="mailto:wilma.hermann@gmail.com" target="_blank">wilma.hermann@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
Is it possible to assign limited admin rights to certain accounts? I<br>
would like to have a user that is allowed to do all the user<br>
management (creating users, adding users to existing groups, etc.)<br>
without adding this user to the oneadmin-group. In particular, I would<br>
like to deny this user access to all other users' VMs, templates,<br>
images, etc. The user also shouldn't have write-access to the ACLs<br>
(otherwise limits would make no sense obviously).<br>
<br>
Greetings<br>
Wilma<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div><div>-- <br></div></div>Ruben S. Montero, PhD<br>Project co-Lead and Chief Architect<div>OpenNebula - Flexible Enterprise Cloud Made Simple<br>
<a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:rsmontero@opennebula.org" target="_blank">rsmontero@opennebula.org</a> | @OpenNebula</div></div>
</div>