add more privileges, improve docs

[pve-access-control.git] / PVE / AccessControl.pm

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index 86c15fdf1b4d16b0b2c6b39c856796ef425621a4..47b010f98eb0b00bfe5c89bc76c4ac92ff7f4a0b 100644 (file)
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -548,9 +548,16 @@ my $privgroups = {
     VM => {
        root => [],
        admin => [           
     VM => {
        root => [],
        admin => [           

-           'VM.Modify', 
+           'VM.Config.Disk', 
+           'VM.Config.CDROM', 
+           'VM.Config.CPU', 
+           'VM.Config.Memory', 
+           'VM.Config.Network', 
+           'VM.Config.HWType',
+           'VM.Config.Options', # covers all other things 

            'VM.Allocate', 
            'VM.Migrate',
            'VM.Allocate', 
            'VM.Migrate',

+           'VM.Monitor', 

        ],
        user => [
            'VM.Console', 
        ],
        user => [
            'VM.Console',