On Tue, Jul 20, 2010 at 08:01:15AM -0500, Neil Aggarwal wrote: > Hello: > > One of my customers asked for access to stop and start > their guest VM. > > Right now, I can do that using virsh, but I do not want > to give this customer the ability to stop and start > all VMs running on the host. > > Is there a way to give stop and start control of one > VM to someone? Fine grained role based access control is not available at the libvirt/virsh level. It is currently something that must be provided by the management layer above libvirt. We intend to add this capability directly into libvirt in the future, but there's no firm ETA. So in the immediate term you'd need to write a small tool using libvirt APIs to delegate stop/start operations to users you desire Regards, Daniel -- |: Red Hat, Engineering, London -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://deltacloud.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :| -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
