I am running KVM on a RHEL6 machine that currently runs 4 guest VMs. I have been tasked with finding a way to give a local user (local to the host machine) administrative power over only their assigned VM, be it through virt-manager or another service.
For example, say there was a local user on the host machine named "foo" and we have given him the guest VM "bar" to use. I am wondering if there is a way to give "foo" the ability to ssh in to the host machine and run virt-manager (or some other service) to administer their vm but restrict their access so they are only able to view/manage "bar" and not the other 3 VMs.
We are running this virtualization server to host multiple VMs for research groups and we would like to be able to give each of those research groups the ability to start/stop their own VMs, but for security reasons we want to be able to restrict their access to only their assigned VM. We don't want to give them any other administrative powers on the host machine.
Is this possible or is there an application to do this? If so, would someone be able to point me in the right direction? I'm rather new to administering servers and VMs so I'm not too sure where to start looking (Google hasn't given me anything yet either).