X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=blobdiff_plain;f=PVE%2FAccessControl.pm;h=ddad2c7743ac037040307522b77249ebf14f34cf;hp=0dce3e62a0f3ad0760f8b2bde06af6ff23c385e0;hb=82b63965ebbeb41d16a76051018992144eda0a6a;hpb=8de1fb5ae30b7365bee1779fc2db930395b3c164

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index 0dce3e6..ddad2c7 100644
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -557,7 +557,7 @@ my $privgroups = {
 	    'VM.PowerMgmt',
 	],
 	audit => [ 
-	    'VM.Audit' 
+	    'VM.Audit',
 	],
     },
     Sys => {
@@ -588,10 +588,13 @@ my $privgroups = {
 	],
     },
     User => {
-	root => [],
+	root => [
+	    'Realm.Allocate',
+	],
 	admin => [
 	    'User.Modify',
-	    'User.Allocate',
+	    'Group.Allocate', # edit/change group settings
+	    'Realm.AllocateUser', 
 	],
 	user => [],
 	audit => [],