Per-User Access and Quotas in ManageIQ

[Petikuu]

Hi guys,

We are using ManageIQ with AD authentication and need to ensure that students can only see their own instances. Currently, we can restrict access per project group, but all members of the group see all project instances.

Our requirements:
Per-user access: Each student should see only their own instances, not other students’ instances.
Quotas: Each student should have a quota, ideally with a central quota for a course/project and possible sub-quotas per student.
Structure simplicity: We have courses (e.g., SOS) and engineering projects. Students should only see their own environments or environments of a small assigned group (2 people max).

Is there a way to configure per-user tenants or policies? If not, can you recommend an alternative structure so students only see their own instances without complex administration?

Thank you

Best regards, Peter

[Fryguy]

We don't have per-user tenant policies nor quotas, but we do have user-ownership of resources. You should be able to configure group-level quota, but still set the owner of a VM to a specific user. Then using RBAC, you can set the group to only be able to see user-owned resources.

[dhamo-ror]

Hi @agrare , we are also experiencing the same issue mentioned by @Petikuu . Could you please share any updates on this?

[dhamo-ror]

Hi @agrare, Any insights on this

[agrare]

Hey @dhamo-ror can you open an issue [here] and describe what you're seeing? This thread has a few different topics and I'd like to focus on exactly what you're seeing

[dhamo-ror]

Hi @agrare , we are also facing both issues — user-level access to VMs or snapshots and utilization metrics for OpenStack VMs. We would appreciate your inputs on both of the points mentioned by @Petikuu.

[dhamo-ror]

Also, if required, I will open a new issue for the utilization metrics, as Gnocchi integration is not working as expected.