From 649ba5592baafa6340eb829fbd2d2fd4b6639d2f Mon Sep 17 00:00:00 2001 From: Michal Fox Date: Fri, 2 Oct 2026 16:59:04 +0200 Subject: [PATCH] fix #7560: user management: privileges: document Sys.AccessNetwork The Sys.AccessNetwork privilege got added with pve-access-control commit 36c1814 ("add Sys.AccessNetwork privilege") and is part of the built-in Administrator role, but it is missing in the list of privileges. Document it with examples from the API calls that currently check for it, which are downloading ISO images, templates and other images from a URL to a storage and querying the metadata of such a URL, querying the tags of and pulling OCI images, and creating or updating notification targets. Signed-off-by: Michal Fox --- pveum.adoc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pveum.adoc b/pveum.adoc index d089cb6..c28eae5 100644 --- a/pveum.adoc +++ b/pveum.adoc @@ -889,6 +889,9 @@ Node / System related privileges:: * `Realm.Allocate`: create/modify/remove authentication realms * `SDN.Allocate`: manage SDN configuration * `SDN.Audit`: view SDN configuration +* `Sys.AccessNetwork`: access the network from the node, for example to + download ISO images or templates from a URL, to pull OCI images or to set up + notification targets * `Sys.Audit`: view node status/config, Corosync cluster config, and HA config * `Sys.Console`: console access to node * `Sys.Incoming`: allow incoming data streams from other clusters (experimental)