Berechtigungen

Alle Berechtigungen für eigene Rollen, wie sie im Rollen-Editor heißen, und welche davon die Systemrollen operator und viewer haben.

Diese Liste entspricht dem Rollen-Editor. Die Spalte Im Rollen-Editor nennt Gruppe und Bezeichnung, die Beschreibung steht so im Editor. Die Systemrolle admin hat alle Berechtigungen; die Spalten operator und viewer zeigen, was die anderen Systemrollen haben.

⚠ = sensitiv: legt Daten offen, ist zerstörerisch oder kann Rechte ausweiten. Mehr dazu unter Rollen.

Jede Aktion setzt das Ansichtsrecht ihrer Kategorie voraus (z. B. backup.view); der Rollen-Editor ergänzt es automatisch.

Virtual Machines

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`vm.view`	General › View	See VMs, their status, configuration and metrics.	✓	✓
`vm.create`	General › Create	Create new VMs.
`vm.clone`	General › Clone	Clone an existing VM (full or linked).
`vm.delete` ⚠	General › Delete	Permanently delete VMs and their disks.
`vm.power.start`	Power › Start	Power on a VM.	✓
`vm.power.shutdown`	Power › Shut down	Gracefully shut down a VM via the guest OS.	✓
`vm.power.stop` ⚠	Power › Force stop	Hard power-off a VM (like pulling the plug).	✓
`vm.power.reboot`	Power › Reboot	Reboot a VM.	✓
`vm.config.edit`	Configuration › Edit configuration	Change CPU, memory, boot, network, display and other VM settings.
`vm.tags.edit`	Configuration › Edit tags	Add or remove tags on a VM.
`vm.disk.move`	Configuration › Move disks	Move a VM disk to another storage.
`vm.template.convert`	Configuration › Convert to / from template	Turn a VM into a template, or a template back into a VM.
`vm.migrate`	Migration › Migrate	Move a VM to another node of its cluster (live while it is running; local disks are copied).
`vm.snapshot.create`	Snapshots › Create	Take snapshots of a VM.	✓
`vm.snapshot.restore` ⚠	Snapshots › Restore	Roll a VM back to a snapshot, discarding its current state.
`vm.snapshot.delete` ⚠	Snapshots › Delete	Delete VM snapshots.
`vm.console` ⚠	Console › Open console	Open the graphical (VNC) console — equivalent to sitting at the machine.
`vm.remote.ssh` ⚠	Remote access › SSH terminal	Open an SSH terminal session to a VM.
`vm.remote.sftp.browse` ⚠	Remote access › SFTP: browse & download	List directories and download files from a VM.
`vm.remote.sftp.upload` ⚠	Remote access › SFTP: upload	Upload files to a VM.
`vm.remote.sftp.modify` ⚠	Remote access › SFTP: delete, rename & create folders	Delete, rename and create files and folders on a VM.
`vm.remote.credentials.save`	Remote access › Save credentials	Store a login for a VM in the encrypted vault.
`vm.remote.credentials.clear`	Remote access › Clear credentials	Delete a VM's saved login.

Remote Hosts

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor
`remote-host.view`	Inventory › View	See the list of external hosts (names and addresses, never credentials).
`remote-host.create`	Inventory › Create	Add an external host to the inventory.
`remote-host.edit`	Inventory › Edit	Change a host's name, address, port or notes. Changing the address clears its saved credentials.
`remote-host.delete` ⚠	Inventory › Delete	Remove a host and its saved credentials.
`remote-host.ssh` ⚠	Connect › SSH terminal	Open an SSH terminal session to a host, or to an ad-hoc address.
`remote-host.sftp.browse` ⚠	Connect › SFTP: browse & download	List directories and download files.
`remote-host.sftp.upload` ⚠	Connect › SFTP: upload	Upload files.
`remote-host.sftp.modify` ⚠	Connect › SFTP: delete, rename & create folders	Delete, rename and create files and folders.
`remote-host.credentials.save`	Saved credentials › Save	Store a first login for a host (cannot overwrite an existing one).
`remote-host.credentials.replace` ⚠	Saved credentials › Replace	Overwrite a host's existing saved login.
`remote-host.credentials.clear` ⚠	Saved credentials › Clear	Delete a host's saved login.

Containers

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`container.view`	General › View	See containers, their status and metrics.	✓	✓
`container.create`	General › Create	Create new LXC containers.
`container.delete` ⚠	General › Delete	Permanently delete containers.
`container.power.start`	Power › Start	Start a container.	✓
`container.power.shutdown`	Power › Shut down	Gracefully shut down a container.	✓
`container.power.stop` ⚠	Power › Force stop	Hard-stop a container.	✓
`container.power.reboot`	Power › Reboot	Reboot a container.	✓
`container.snapshot.create`	Snapshots › Create	Take snapshots of a container.
`container.snapshot.restore` ⚠	Snapshots › Restore	Roll a container back to a snapshot.
`container.snapshot.delete` ⚠	Snapshots › Delete	Delete container snapshots.
`container.migrate`	Migration › Migrate	Move a container to another node of its cluster (a running container is restarted there).

Storage

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`storage.view`	Storage pools › View	See storage pools, usage and their contents.	✓	✓
`storage.create`	Storage pools › Create	Define a new storage pool.
`storage.rename`	Storage pools › Rename	Rename a storage pool.
`storage.delete` ⚠	Storage pools › Delete	Remove a storage pool definition.
`storage.migrate`	Storage pools › Migrate	Move content off a storage pool onto another.
`storage.content.upload`	Content › Upload	Upload ISO images and container templates.
`storage.content.delete` ⚠	Content › Delete	Delete ISO images, templates and other stored content.

Load Balancing

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor
`balance.view`	Balancing › View	See each cluster's balance, the recommendations, the rules and the migration history.
`balance.apply`	Balancing › Apply recommendations	Start a recommended move, or dismiss it. Each move also needs Migrate for that VM or container.
`balance.configure` ⚠	Balancing › Configure	Change the balancing mode, aggressiveness and rules. In automatic mode VexCore then moves guests on its own.
`balance.maintenance`	Maintenance › Maintenance mode	Put a node into maintenance — VexCore moves its guests to other nodes and keeps every move off it — and end it again. Each move also needs Migrate for that VM or container.

VM Import

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor
`import.view`	ESXi sources › View	See the ESXi / vCenter import sources (host and username, never the password), the VMs on them and past imports.
`import.source.create` ⚠	ESXi sources › Add	Add an ESXi / vCenter source: Proxmox stores its login and connects to the host given.
`import.source.edit`	ESXi sources › Edit	Change a source's host, login, port, certificate check or node restriction.
`import.source.delete` ⚠	ESXi sources › Remove	Remove a source (and the login Proxmox stored for it).
`import.run`	Import › Import VMs	Import a VM from an ESXi / vCenter source into Proxmox as a new VM.

Backups

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`backup.view`	Backups › View	See backups, verification results and backup reports.	✓	✓
`backup.create`	Backups › Create	Run a backup of a VM or container.	✓
`backup.restore` ⚠	Backups › Restore	Restore a backup, overwriting the target guest.
`backup.delete` ⚠	Backups › Delete	Permanently delete backups.
`backup.verify`	Backups › Verify	Check that a backup file still exists with a non-zero size and a known format (not a restore test).
`backup.policy.create`	Scheduled policies › Create	Create scheduled backup jobs.
`backup.policy.edit`	Scheduled policies › Edit	Change scheduled backup jobs.
`backup.policy.delete`	Scheduled policies › Delete	Delete scheduled backup jobs.
`backup.policy.run`	Scheduled policies › Run now	Trigger a scheduled backup job immediately.
`backup.retention.edit` ⚠	Retention › Edit & apply	Change the retention policy and apply it (which prunes old backups).
`backup.offsite.edit` ⚠	Offsite › Edit configuration	Change the offsite (S3) target, including its access keys.
`backup.offsite.sync`	Offsite › Sync	Run an offsite sync.

Users

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	viewer
`user.view`	Users › View	See the user list (names, emails, roles, status).	✓
`user.create`	Users › Create	Create user accounts. Choosing the new user's role also needs Assign role.
`user.edit`	Users › Edit	Change a user's name, email or status.
`user.delete` ⚠	Users › Delete	Delete user accounts.
`user.password.reset` ⚠	Users › Reset password	Set another user's password without knowing the old one.
`user.role.assign` ⚠	Users › Assign role	Change which role a user holds. Limited to roles no more powerful than your own.

Roles

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	viewer
`role.view`	Roles › View	See roles and the permissions they grant.	✓
`role.create` ⚠	Roles › Create	Create custom roles. You can only grant permissions you hold yourself.
`role.edit` ⚠	Roles › Edit	Rename a custom role or change its permissions. You can only add permissions you hold yourself.
`role.delete` ⚠	Roles › Delete	Delete a custom role that no user holds.

License

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`license.view`	License › View	See the active license and plan.		✓
`license.manage`	License › Manage	Activate, replace or remove the license key.

Alerts

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`alert.view`	Alerts › View	See alert settings.	✓	✓
`alert.manage`	Alerts › Manage	Change alert recipients and thresholds, and send a test email.

HTTPS

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`tls.view`	Certificate › View	See the certificate the web interface is served with, its expiry warnings, and download the Proxmox root CA.

Network

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`network.view`	Interfaces › View	See bridges, VLANs, bonds and physical interfaces.	✓	✓
`network.create`	Interfaces › Create	Create bridges, VLANs and bonds (staged until applied).
`network.edit`	Interfaces › Edit	Change interface configuration (staged until applied).
`network.delete` ⚠	Interfaces › Delete	Delete interfaces (staged until applied).
`network.apply` ⚠	Interfaces › Apply changes	Commit pending network changes to the node — a bad config can cut off access to it.

Monitoring

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`monitoring.view`	Checks › View	See monitoring checks and their history.	✓	✓
`monitoring.create`	Checks › Create	Create monitoring checks.
`monitoring.edit`	Checks › Edit	Change monitoring checks.
`monitoring.delete`	Checks › Delete	Delete monitoring checks.
`monitoring.run`	Checks › Run now	Run all due checks immediately.

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`tag.view`	Tags › View	See the tag list.	✓	✓
`tag.create`	Tags › Create	Create tags.
`tag.delete`	Tags › Delete	Delete tags (removes them from every VM).

AI Assistant

Berechtigung	Im Rollen-Editor	Beschreibung im Rollen-Editor	operator	viewer
`chat.use`	Assistant › Use	Chat with the AI assistant. It can only run actions the user could perform themselves.	✓	✓

Virtual MachinesLink zu diesem Abschnitt kopieren

Remote HostsLink zu diesem Abschnitt kopieren

ContainersLink zu diesem Abschnitt kopieren

StorageLink zu diesem Abschnitt kopieren

Load BalancingLink zu diesem Abschnitt kopieren

VM ImportLink zu diesem Abschnitt kopieren

BackupsLink zu diesem Abschnitt kopieren

UsersLink zu diesem Abschnitt kopieren

RolesLink zu diesem Abschnitt kopieren

LicenseLink zu diesem Abschnitt kopieren

AlertsLink zu diesem Abschnitt kopieren

HTTPSLink zu diesem Abschnitt kopieren

NetworkLink zu diesem Abschnitt kopieren

MonitoringLink zu diesem Abschnitt kopieren

TagsLink zu diesem Abschnitt kopieren

AI AssistantLink zu diesem Abschnitt kopieren

Auf dieser Seite