(RESOLVED) AssignVirtualMachine

[Matthew Smart <ms...@smartsoftwareinc.com>]

I had already checked the Template and it was set to public. However, 
its underlying ISO was not set to public. Changing the ISO to public 
allowed me to move the VM. Thank you Pearl and Abhishek for the help! I 
love this community.

Matthew Smart
President
Smart Software Solutions Inc.
108 S Pierre St.
Pierre, SD 57501

Phone: (605) 280-0383
Skype: msmart13
Email: msmart@smartsoftwareinc.com

On 9/10/20 2:00 AM, Pearl d'Silva wrote:
> Hi Matthew,
>
> A probable reason for the permission denied issue could be that the user account doesn't have access to the template/ ISO with which the VM has been spawned up with. Editing its permissions - i.e., making it public and sharing the template/ISO with the specific account may help resolve the issue.
>
> Thanks,
> Pearl
>
> ________________________________
> From: Matthew Smart <ms...@smartsoftwareinc.com>
> Sent: Thursday, September 10, 2020 2:10 AM
> To: users@cloudstack.apache.org <us...@cloudstack.apache.org>
> Subject: Re: AssignVirtualMachine
>
> Yeah it is really odd. I have tried both logging into the UI as admin as
> well as ensuring I have the admin key and secret and using the API
> directly. I get the same error in both cases.
>
> Matthew Smart
> President
> Smart Software Solutions Inc.
> 108 S Pierre St.
> Pierre, SD 57501
>
> Phone: (605) 280-0383
> Skype: msmart13
> Email: msmart@smartsoftwareinc.com
>
> On 9/9/20 3:15 PM, Abhishek Kumar wrote:
>> Hi Mathew,
>>
>> While trying to assign your VM from ADMIN to USER account, are you making this API call as the user?
>> This error must be due to the reason that the caller of the API doesn't have permission to operate on the given resource (VM belongs to the admin account and the user cannot operate on it). You can try calling the same API as the root admin and it should work.
>>
>> I'm not aware of any resource on API permissions system myself but general rules are check for API access for a particular user role, domain admin and user account cannot operate on resources owned by users of other domains or parent/root domain.
>>
>> Regards,
>> Abhishek
>>
>> ________________________________
>> From: Matthew Smart <ms...@smartsoftwareinc.com>
>> Sent: 09 September 2020 23:32
>> To: users@cloudstack.apache.org <us...@cloudstack.apache.org>
>> Subject: AssignVirtualMachine
>>
>> I have not had to do this in quite some time but I can no longer assign
>> a VM from my root account to a user account. I get the following error:
>>
>> Failed to move vm Acct[UUID-USERNAME] does not have permission to
>> operate with resource Acct[UUID-admin]
>>
>> I know that a bunch of permission stuff has been added over the last few
>> releases but I have no idea which one I need to set to get this working.
>> I'm running 4.13.0 in case it matters. Any ideas and/or any good
>> resources outlining the API permissions system? I was able to find the
>> permissions in the UI but it looks like it is allow/deny on a per API
>> call basis. I added assignvirtualmachine there but it is still failing.
>>
>> Thanks,
>>
>>
>> --
>> Matthew Smart
>> President
>> Smart Software Solutions Inc.
>> 108 S Pierre St.
>> Pierre, SD 57501
>>
>> Phone: (605) 280-0383
>> Skype: msmart13
>> Email: msmart@smartsoftwareinc.com
>>
>>
>> Abhishek.Kumar@shapeblue.com
>> www.shapeblue.com<http://www.shapeblue.com>
>> 3 London Bridge Street,  3rd floor, News Building, London  SE1 9SGUK
>> @shapeblue
>>
>>
>>
>
> pearl.dsilva@shapeblue.com
> www.shapeblue.com
> 3 London Bridge Street,  3rd floor, News Building, London  SE1 9SGUK
> @shapeblue
>    
>   
>
>