Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Currently, I have a XenServer and XenCenter setup with my root account which allows me to manage all the VM's on the server.

I'd like to know if it is possible to create client accounts in XenServer which have permissions that are set so they can only manage 1 or 2 VM's instead of all the VM's on the server and the server itself.

So to clarify - I want to be able to create user accounts that do not have root privilages in XenServer so that other people can login and manage 1 or 2 VM's which are assigned to their account.

Is it possible to do this?

share|improve this question
Looking at this: It seems that it is possible - "Role-based access control" – nevada_scout Jun 24 '11 at 13:07

Sadly, this is not possible with XenCenter although there is a web-based alternative from Citrix called XenServer Self Service Virtual Appplaince. It's a CentOS VM that allows you you to assign specific users access to VM console sessions along with other controls.

As for XenCenter access controls, you can assign different users to different permission levels, but you can't specify access on a VM level.

This KB article lists all the possible role permissions:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.