virsh rights voor normal users

[Natxo Asenjo <natxo.asenjo@xxxxxxxxx>]

hi,

using the cockpit web ui and with these instructions:

https://libvirt.org/dbus.html#usage

we allow successfully that a group of users can access the console of the system vms in different kvm hosts.

Oddly enough, in the same cockpit web interface I can use a terminal, and if I run virsh list --all I get an empty listing.

So using cockpit I can manage the system vms, but I cannot use virsh.

This is in a rhel 7.8 system. The host is joined to an Idm realm, and this realm has a trust to an AD forest. The users are AD users mapped to an external Idm group.

Any ideas as to what we do wrong?

Thanks!

--
regards,
Natxo