mirror of
https://github.com/Corsinvest/cv4pve-admin.git
synced 2026-04-25 04:45:59 +03:00
[GH-ISSUE #189] [Feedback]: Permissions BUG/Documentation missing/misplaced? #62
Labels
No labels
bug
bug
enhancement
feedback
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/cv4pve-admin#62
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @tastelessbrain on GitHub (Feb 24, 2026).
Original GitHub issue: https://github.com/Corsinvest/cv4pve-admin/issues/189
Edition
Community Edition (CE)
Version
2.0.0-rc5
Feedback Type
Improvement Suggestion
Description
So im not exatcly sure if it is a bug or i only stared at my screen for too long but here we go.
I need to adhere to least privileges to be allowed to use CV4PVE-Admin on our cluster.
First I cant seem to find the needed Token Privileges in the documentation of this repo.
So I dug through the documentation of the different corsinvest tools and createtd a TOKEN with the following privileges. (Screenshots for context where i found those.)
Assigned to Role:
AutomatedSnapshot
Role assigned to API Token. Privilege separation active.
Now i want to add my Cluster in the web ui.
It works fine with user & pw auth and my admin user.
But for API Token Auth i get:
Permission check failed (/, Sys.Audit)Should be self explainatory. But i have granted Sys.Audit at "/".
So my question is:
Additional Context
Proxmox Role and API Token:
Found Documentation parts:
https://github.com/Corsinvest/cv4pve-autosnap?tab=readme-ov-file#required-permissions
https://github.com/Corsinvest/cv4pve-diag?tab=readme-ov-file#required-permissions
Logs form container:
2026-02-24 13:54:31.488 +01:00 [WRN] Request Get /cluster/status failed permanently: Forbidden - Permission check failed (/, Sys.Audit) <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:28.411 +01:00 [WRN] Authentication error detected, attempting re-login... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:28.411 +01:00 [INF] Attempting re-authentication... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:28.416 +01:00 [INF] Re-authentication completed successfully <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:28.418 +01:00 [WRN] Authentication error detected, attempting re-login... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:28.418 +01:00 [INF] Attempting re-authentication... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:28.422 +01:00 [INF] Re-authentication completed successfully <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:28.423 +01:00 [WRN] Authentication error detected, attempting re-login... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:28.423 +01:00 [INF] Attempting re-authentication... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:28.427 +01:00 [INF] Re-authentication completed successfully <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:28.428 +01:00 [WRN] Request Get /cluster/status failed permanently: Forbidden - Permission check failed (/, Sys.Audit) <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:36.462 +01:00 [WRN] Authentication error detected, attempting re-login... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:36.462 +01:00 [INF] Attempting re-authentication... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:36.466 +01:00 [INF] Re-authentication completed successfully <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:36.467 +01:00 [WRN] Authentication error detected, attempting re-login... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:36.467 +01:00 [INF] Attempting re-authentication... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:36.471 +01:00 [INF] Re-authentication completed successfully <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:36.473 +01:00 [WRN] Authentication error detected, attempting re-login... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:36.473 +01:00 [INF] Attempting re-authentication... <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:36.476 +01:00 [INF] Re-authentication completed successfully <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry> 2026-02-24 14:07:36.478 +01:00 [WRN] Request Get /cluster/status failed permanently: Forbidden - Permission check failed (/, Sys.Audit) <s:Corsinvest.ProxmoxVE.Admin.Core.Clients.Pve.PveClientWithRetry>@franklupo commented on GitHub (Feb 24, 2026):
Thank you for the feedback!
The required Proxmox VE role for cv4pve-admin is
PVEAdminassigned at path/.We are updating the documentation in the Getting Started guide to clarify this requirement. Using a subset of privileges (e.g.
Sys.Auditalone) is not sufficient and will cause permission errors at runtime.The documentation update will be included in the next release.