Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Currently, I have a XenServer and XenCenter setup with my root account which allows me to manage all the VM's on the server.

I'd like to know if it is possible to create client accounts in XenServer which have permissions that are set so they can only manage 1 or 2 VM's instead of all the VM's on the server and the server itself.

So to clarify - I want to be able to create user accounts that do not have root privilages in XenServer so that other people can login and manage 1 or 2 VM's which are assigned to their account.

Is it possible to do this?

share|improve this question
    
Looking at this: community.citrix.com/display/xs/XenCenter It seems that it is possible - "Role-based access control" –  nevada_scout Jun 24 '11 at 13:07

1 Answer 1

Sadly, this is not possible with XenCenter although there is a web-based alternative from Citrix called XenServer Self Service Virtual Appplaince. It's a CentOS VM that allows you you to assign specific users access to VM console sessions along with other controls.

http://blogs.citrix.com/2010/10/06/xenserver-self-service-portal-up-and-running-in-5-mins/ http://blogs.citrix.com/2011/07/12/xenserver-self-service-manager-beta/

As for XenCenter access controls, you can assign different users to different permission levels, but you can't specify access on a VM level.

This KB article lists all the possible role permissions: http://support.citrix.com/article/CTX126442

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.