X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=blobdiff_plain;f=PVE%2FAccessControl.pm;h=3cae437bb39d6179bcad847bea42e476a4cd925e;hp=86c15fdf1b4d16b0b2c6b39c856796ef425621a4;hb=68d5a86d1ad4bda368efa6ac7426f68302365a37;hpb=dee1c8829a1496d285559677174c9a11a3284c9f

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index 86c15fd..3cae437 100644
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -548,12 +548,20 @@ my $privgroups = {
     VM => {
 	root => [],
 	admin => [	     
-	    'VM.Modify', 
+	    'VM.Config.Disk', 
+	    'VM.Config.CDROM', # change CDROM media
+	    'VM.Config.CPU', 
+	    'VM.Config.Memory', 
+	    'VM.Config.Network', 
+	    'VM.Config.HWType',
+	    'VM.Config.Options', # covers all other things 
 	    'VM.Allocate', 
 	    'VM.Migrate',
+	    'VM.Monitor', 
 	],
 	user => [
 	    'VM.Console', 
+	    'VM.Backup',
 	    'VM.PowerMgmt',
 	],
 	audit => [ 
@@ -579,6 +587,7 @@ my $privgroups = {
 	root => [],
 	admin => [
 	    'Datastore.Allocate',
+	    'Datastore.AllocateTemplate',
 	],
 	user => [
 	    'Datastore.AllocateSpace',