广告用户的权限通过REST API拒绝克隆VM |Nutanix社区

Get a free certification exam when you complete a training course now through August 16! <\/strong><\/h3>
\u00a0<\/p>
Level up your Nutanix skills and get certified for free with Nutanix University Summer School! For the next two months, anyone who completes one of the following courses - whether it\u2019s online or in person - will also receive a FREE certification exam voucher.<\/span><\/p>
Eligible courses:<\/strong><\/p>
\t
Enterprise Cloud Administration<\/span><\/p>\t<\/li>\t
\t
Nutanix Data Services Administration<\/span><\/p>\t<\/li>\t
\t
Nutanix End User Computing Administration<\/span><\/p>\t<\/li>\t
\t
Nutanix Database Management & Automation<\/span><\/p>\t<\/li>\t
\t
Nutanix Multicloud Automation Administration<\/span><\/p>\t<\/li><\/ul>
\u00a0<\/p>
Take this opportunity to invest in your career and grow your skill set.\u00a0<\/span><\/p>
\u00a0<\/h3>
Get started today!<\/a><\/h3>
\u00a0<\/p>
Thanks for waiting to everyone who got our sneak peek of this last week!\u00a0\ud83d\ude09<\/p>
\u00a0<\/p>
Terms and Conditions<\/strong><\/em><\/p>
\t
The exam voucher will be provided to you after you have completed the course. Self-paced online student\u2019s vouchers will be assigned through the Learning Plan within 24-hours after the completion of the course.<\/span><\/em><\/p>\t<\/li>\t
\t
You must complete the course between June 14, 2022 and August 16, 2022.\u00a0<\/span><\/em><\/p>\t<\/li>\t
\t
For online students, your exam voucher must be redeemed by 8\/23\/22. For instructor-led students, your exam voucher must be redeemed 6 months after you complete the course.\u00a0<\/span><\/em><\/p>\t<\/li>\t
\t
The exam voucher code can only be used once.<\/span><\/em><\/p>\t<\/li>\t
\t
You will receive one (1) NCP exam voucher for each class completed. The voucher can be used on any NCP exam.\u00a0\u00a0<\/span><\/em><\/p>\t<\/li><\/ul>
\u00a0<\/p>
This article was written by Karlie Beil, Customer Marketing Specialist.\u00a0<\/p><\/div><\/div><\/section>
\u00a0<\/p>
\u00a9\ufe0f\ufe0f\ufe0f 2022 Nutanix, Inc. \u00a0All rights reserved. Nutanix, the Nutanix logo and all Nutanix product, feature and service names mentioned herein are registered trademarks or trademarks of Nutanix, Inc. in the United States and other countries. Other brand names mentioned herein are for identification purposes only and may be the trademarks of their respective holder(s). This post may contain links to external websites that are not part of Nutanix.com. Nutanix does not control these sites and disclaims all responsibility for the content or accuracy of any external site. Our decision to link to an external site should not be considered an endorsement of any content on such a site. This post may contain express and implied forward-looking statements, which are not historical facts and are instead based on our current expectations, estimates and beliefs. The accuracy of such statements involves risks and uncertainties and depends upon future events, including those that may be beyond our control, and actual results may differ materially and adversely from those anticipated or implied by such statements. Any forward-looking statements included herein speak only as of the date hereof and, except as required by law, we assume no obligation to update or otherwise revise any of such forward-looking statements to reflect subsequent events or circumstances.<\/p>
\u00a0<\/p>","id":40952,"featuredImage":"https:\/\/uploads-us-west-2.insided.com\/nutanix-us\/attachment\/78f47513-ef06-4bf4-9b57-0269259ac6da_thumb.png","label":"Blog","replyCount":0,"views":5449,"post":{"id":61291,"author":{"id":113632,"url":"\/members\/karlie-beil-113632","name":"Karlie Beil","avatar":"https:\/\/uploads-us-west-2.insided.com\/nutanix-us\/icon\/200x200\/1581aab3-bcf6-49f4-b2fb-3d11e8c010dc.png","userTitle":"Community Manager","rank":{"isBold":false,"isItalic":false,"isUnderline":false,"name":"Community Manager","color":"#0873ba"},"userLevel":2},"content":"
Get a free certification exam when you complete a training course now through August 16! <\/strong><\/h3>
\u00a0<\/p>
Level up your Nutanix skills and get certified for free with Nutanix University Summer School! For the next two months, anyone who completes one of the following courses - whether it\u2019s online or in person - will also receive a FREE certification exam voucher.<\/span><\/p>
Eligible courses:<\/strong><\/p>
\t
Enterprise Cloud Administration<\/span><\/p>\t<\/li>\t
\t
Nutanix Data Services Administration<\/span><\/p>\t<\/li>\t
\t
Nutanix End User Computing Administration<\/span><\/p>\t<\/li>\t
\t
Nutanix Database Management & Automation<\/span><\/p>\t<\/li>\t
\t
Nutanix Multicloud Automation Administration<\/span><\/p>\t<\/li><\/ul>
\u00a0<\/p>
Take this opportunity to invest in your career and grow your skill set.\u00a0<\/span><\/p>
\u00a0<\/h3>
Get started today!<\/a><\/h3>
\u00a0<\/p>
Thanks for waiting to everyone who got our sneak peek of this last week!\u00a0\ud83d\ude09<\/p>
\u00a0<\/p>
Terms and Conditions<\/strong><\/em><\/p>
\t
The exam voucher will be provided to you after you have completed the course. Self-paced online student\u2019s vouchers will be assigned through the Learning Plan within 24-hours after the completion of the course.<\/span><\/em><\/p>\t<\/li>\t
\t
You must complete the course between June 14, 2022 and August 16, 2022.\u00a0<\/span><\/em><\/p>\t<\/li>\t
\t
For online students, your exam voucher must be redeemed by 8\/23\/22. For instructor-led students, your exam voucher must be redeemed 6 months after you complete the course.\u00a0<\/span><\/em><\/p>\t<\/li>\t
\t
The exam voucher code can only be used once.<\/span><\/em><\/p>\t<\/li>\t
\t
You will receive one (1) NCP exam voucher for each class completed. The voucher can be used on any NCP exam.\u00a0\u00a0<\/span><\/em><\/p>\t<\/li><\/ul>
\u00a0<\/p>
This article was written by Karlie Beil, Customer Marketing Specialist.\u00a0<\/p><\/div><\/div><\/section>
\u00a0<\/p>
\u00a9\ufe0f\ufe0f\ufe0f 2022 Nutanix, Inc. \u00a0All rights reserved. Nutanix, the Nutanix logo and all Nutanix product, feature and service names mentioned herein are registered trademarks or trademarks of Nutanix, Inc. in the United States and other countries. Other brand names mentioned herein are for identification purposes only and may be the trademarks of their respective holder(s). This post may contain links to external websites that are not part of Nutanix.com. Nutanix does not control these sites and disclaims all responsibility for the content or accuracy of any external site. Our decision to link to an external site should not be considered an endorsement of any content on such a site. This post may contain express and implied forward-looking statements, which are not historical facts and are instead based on our current expectations, estimates and beliefs. The accuracy of such statements involves risks and uncertainties and depends upon future events, including those that may be beyond our control, and actual results may differ materially and adversely from those anticipated or implied by such statements. Any forward-looking statements included herein speak only as of the date hereof and, except as required by law, we assume no obligation to update or otherwise revise any of such forward-looking statements to reflect subsequent events or circumstances.<\/p>
\u00a0<\/p>","url":"\/education-blog-153\/level-up-your-nutanix-skills-this-summer-and-get-a-free-exam-voucher-40952?postid=61291#post61291","creationDate":"2022-06-14T15:30:05+0000","relativeCreationDate":"1 month ago"},"contentType":"article","type":3,"likes":7,"hasCurrentUserLiked":false},"phrases":{"Forum":{"{n} year|{n} years":"{n} year|{n} years","{n} month|{n} months":"{n} month|{n} months","{n} day|{n} days":"{n} day|{n} days","{n} hour|{n} hours":"{n} hour|{n} hours","{n} minute|{n} minutes":"{n} minute|{n} minutes","just":"just now","{plural} ago":"{plural} ago"}}}">

今年夏天提高您的Nutanix技能，并获得免费的考试凭证！

1个月前

社区

关于nutanix

棱镜对下属及其行动

通过REST API拒绝AD用户的权限拒绝克隆VM

解决了
通过REST API拒绝AD用户的权限拒绝克隆VM

1年前
2021年1月27日

9回复

427意见

b

+1

巴拉姆

冒险家

9回复

我尝试与REST API Explorer中的AD用户登录。

我正在遇到错误

消息”：“无权访问资源。<请求'http://nmegh02.prd.dcservices.in:9440/v3/vms/c2784552-c129-49-49-49-9d0e-b20b32c2a5e4/clone'[post] “原因”：“ Access_Denied”

我已经完全访问了当前广告用户的角色。

我需要给予什么其他许可，以便广告用户可以执行REST API？

图标
最好的答案Anishwalia202021年2月28日，09：16

Hey\u00a0@Balram<\/user-mention>\u00a0So I checked internally and researched a bit on this issue and got to know that this is currently a feature that is going to be added soon in the upcoming PC releases this year.<\/p>
\u00a0<\/p>
Basically,\u00a0Cloning & snapshotting<\/strong> a VM with non-admin or AD users belonging to custom RBAC(role bases access control) roles<\/strong> on PC is not possible as of now, unfortunately.\u00a0Currently, SSP\/RBAC does not have a REST API or UI support for cloning a user VM<\/p>
\u00a0<\/p>
This is the reason on when you are creating a role and adding actions which that role is permitted to do we don\u2019t see Clone or Snapshot VM<\/strong>\u00a0Permissions:
\u00a0<\/p>
$\"//www.jhbzcj.com/next/prism-for-infra-and-it-ops-26/\"$ <\/figure>
\u00a0<\/p>
Or not even in Custom VM Permissions:
\u00a0<\/p>
$\"//www.jhbzcj.com/next/prism-for-infra-and-it-ops-26/\"$ <\/figure>
\u00a0<\/p>
I hope I made things\u00a0clear. This feature is planned to be added in PC 2021.4 this year.<\/p>
\u00a0<\/p>
Btw what PC version are you running ?<\/p>
\u00a0<\/p>","className":"post__content__best_answer"}">
查看原件

AHV

#API

休息

I tried to log in with AD user in REST API Explorer.<\/p>
I am getting error as<\/p>
message\": \"No permission to access the resource. <Request 'http:\/\/nmegh02.prd.dcservices.in:9440\/v3\/vms\/c2784552-c129-4f49-9d0e-b20b32c2a5e4\/clone' [post]>\", \"reason\": \"ACCESS_DENIED\"<\/code><\/pre>I have given FULL ACCESS to roles of current AD user .i.e VM and APP \u2192 FULL ACCESS in Roles Section.<\/p> What other permission i need to give so that AD user can execute REST API?<\/p>","quoteUsername":"Balram","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}"> 喜欢引用分享
该主题已关闭以供评论 9回复最古老的第一新的先来最佳投票 UserLevel 6 +5 Anishwalia20 Nutanix员工 201回复 1年前 2021年1月27日嘿 @balram 你能检查一下吗KB-2257（使用REST API的身份验证方法）并检查用户是否创建带有REST-API的基本验证示例。阿尼什·辛格·瓦利亚（Anish Singh Walia） Hey @Balram<\/user-mention>\u00a0<\/p>Can you check this KB-2257<\/a>(Authentication Methods using REST API) & check if the user is creating\u00a0Basic Auth example with REST-API<\/strong>.<\/p>","quoteUsername":"AnishWalia20","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}"> 喜欢引用 b +1 巴拉姆作者冒险家 9回复 1年前 2021年1月27日这是更多输出 @anishwalia20 <\/figure>Here is some more output @AnishWalia20<\/user-mention>\u00a0<\/p>","quoteUsername":"Balram","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}"> 喜欢引用 b +1 巴拉姆作者冒险家 9回复 1年前 2021年2月27日嘿 @balram 你能检查一下吗KB-2257（使用REST API的身份验证方法）并检查用户是否创建带有REST-API的基本验证示例。我已经检查了文章kb-2257，我给了基本验证，用编码的base64仍然获得与无权访问资源 \tHey\u00a0@Balram<\/user-mention>\u00a0<\/p>\t Can you check this KB-2257<\/a>(Authentication Methods using REST API) & check if the user is creating\u00a0Basic Auth example with REST-API<\/strong>.<\/p>\t<\/div><\/content-quote> I have checked article KB-2257, i have given Basic Auth with base64 encoded still getting same message as<\/p> No permission to access the resource<\/code><\/pre>","quoteUsername":"Balram","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}"> 喜欢引用 b +1 巴拉姆作者冒险家 9回复 1年前 2021年2月27日嘿 @balram 你能检查一下吗KB-2257（使用REST API的身份验证方法）并检查用户是否创建带有REST-API的基本验证示例。审查了所有角色后，请记下这些观点我已经在AD的VM中创建了两种类型的用户，即Balram作为管理员，用户10 to user01作为用户查看控制台并创建VM。在管理>角色中， Balram用户添加了超级ADMIN角色在Custome创建的角色中添加了User01至User10，例如：受训者注意：我试图将所有许可作为VM，集群作为完整访问权限，结论：我能够通过身份验证Balram来克隆VM。为什么我会通过用户像user10.error这样的用户克隆遇到错误 {“ api_version”：“ 3.1”，“代码”：403，“ message_list”：[{“ message”：“无许可访问资源。错误” } \tHey\u00a0@Balram<\/user-mention>\u00a0<\/p>\t Can you check this KB-2257<\/a>(Authentication Methods using REST API) & check if the user is creating\u00a0Basic Auth example with REST-API<\/strong>.<\/p>\t<\/div><\/content-quote> after reviewing all the roles, please take a note of these points that<\/p> i have create two types of user in AD\u2019s VM i.e Balram as a admin, user01 to user10 as a user to view console and create vm.<\/p> In Administration>Roles,<\/p> Balram users is added in SUPERADMIN Roles<\/p> User01 to user10 are added in Custome Created Role eg:Trainees<\/p> Note: I have tried to give Trainee roles all Permission as VM,Cluster as FULL Access,<\/p> \u00a0<\/p> Conclusion: I am able to clone vm via authenticating as Balram. Why i am getting error on cloning via user like user10 .Error as<\/p> { \"api_version\": \"3.1\", \"code\": 403, \"message_list\": [ { \"message\": \"No permission to access the resource. \", \"reason\": \"ACCESS_DENIED\" } ], \"state\": \"ERROR\" }<\/code><\/pre>\u00a0<\/p>","quoteUsername":"Balram","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}"> 喜欢引用 UserLevel 6 +5 Anishwalia20 Nutanix员工 201回复 1年前 2021年2月28日嘿， @balram感谢更新。让我尝试以上情况，您提到的是通过一些结果与您联系。阿尼什·辛格·瓦利亚（Anish Singh Walia） Hey,\u00a0@Balram<\/user-mention>\u00a0thanks for the update. Let me try out the above scenario you mentioned an get back to you with some results.<\/p>","quoteUsername":"AnishWalia20","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}"> 喜欢引用 UserLevel 6 +5 Anishwalia20 Nutanix员工 201回复 1年前 2021年2月28日回答嘿 @balram因此，我在内部进行了检查，并在此问题上进行了一些研究，并知道这是目前将在今年即将发布的PC版本中添加的功能。基本上，克隆和快照具有非应用程序或广告用户的VM自定义RBAC（角色基础访问控制）角色不幸的是，到目前为止，在PC上是不可能的。当前，SSP/RBAC没有用于克隆用户VM的REST API或UI支持这就是您何时创建角色并添加允许该角色的动作的原因，我们看不到克隆或快照VM许可：甚至不在自定义VM权限中：我希望我能使事情变得清晰。该功能计划在今年的PC 2021.4中添加。顺便说一句，您正在运行什么PC版本？阿尼什·辛格·瓦利亚（Anish Singh Walia） Hey\u00a0@Balram<\/user-mention>\u00a0So I checked internally and researched a bit on this issue and got to know that this is currently a feature that is going to be added soon in the upcoming PC releases this year.<\/p>\u00a0<\/p> Basically,\u00a0Cloning & snapshotting<\/strong> a VM with non-admin or AD users belonging to custom RBAC(role bases access control) roles<\/strong> on PC is not possible as of now, unfortunately.\u00a0Currently, SSP\/RBAC does not have a REST API or UI support for cloning a user VM<\/p> \u00a0<\/p> This is the reason on when you are creating a role and adding actions which that role is permitted to do we don\u2019t see Clone or Snapshot VM<\/strong>\u00a0Permissions: \u00a0<\/p> <\/figure>\u00a0<\/p> Or not even in Custom VM Permissions: \u00a0<\/p> <\/figure>\u00a0<\/p> I hope I made things\u00a0clear. This feature is planned to be added in PC 2021.4 this year.<\/p> \u00a0<\/p> Btw what PC version are you running ?<\/p> \u00a0<\/p>","quoteUsername":"AnishWalia20","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}"> 喜欢引用 b +1 巴拉姆作者冒险家 9回复 1年前 2021年2月28日嘿 @balram因此，我在内部进行了检查，并在此问题上进行了一些研究，并知道这是目前将在今年即将发布的PC版本中添加的功能。基本上，克隆和快照具有非应用程序或广告用户的VM自定义RBAC（角色基础访问控制）角色不幸的是，到目前为止，在PC上是不可能的。当前，SSP/RBAC没有用于克隆用户VM的REST API或UI支持这就是您何时创建角色并添加允许该角色的动作的原因，我们看不到克隆或快照VM许可：甚至不在自定义VM权限中：我希望我能使事情变得清晰。该功能计划在今年的PC 2021.4中添加。顺便说一句，您正在运行什么PC版本？好的，我正在等待2021.4版本，因为我需要此功能在REST API支持的自定义角色权限上。我正在使用5.17.1.1 PC版本。 \tHey\u00a0@Balram<\/user-mention>\u00a0So I checked internally and researched a bit on this issue and got to know that this is currently a feature that is going to be added soon in the upcoming PC releases this year.<\/p>\t \u00a0<\/p>\t Basically,\u00a0Cloning & snapshotting<\/strong> a VM with non-admin or AD users belonging to custom RBAC(role bases access control) roles<\/strong> on PC is not possible as of now, unfortunately.\u00a0Currently, SSP\/RBAC does not have a REST API or UI support for cloning a user VM<\/p>\t \u00a0<\/p>\t This is the reason on when you are creating a role and adding actions which that role is permitted to do we don\u2019t see Clone or Snapshot VM<\/strong>\u00a0Permissions: \t\u00a0<\/p>\t <\/figure>\u00a0<\/p>\t Or not even in Custom VM Permissions: \t\u00a0<\/p>\t <\/figure>\u00a0<\/p>\t I hope I made things\u00a0clear. This feature is planned to be added in PC 2021.4 this year.<\/p>\t \u00a0<\/p>\t Btw what PC version are you running ?<\/p>\t \u00a0<\/p>\t<\/div><\/content-quote> Okay , i am waiting for 2021.4 release as i need this feature on custom role permissions supported with REST API. I am using 5.17.1.1 pc version.<\/p> <\/figure>\u00a0<\/p>","quoteUsername":"Balram","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}"> 喜欢引用 UserLevel 6 +5 Anishwalia20 Nutanix员工 201回复 1年前 2021年2月28日嘿 @balram听起来很棒。让我知道我是否可以以其他方式提供帮助。会很乐意为您提供帮助。阿尼什·辛格·瓦利亚（Anish Singh Walia） Hey @Balram<\/user-mention>\u00a0Sure sounds great. Let me know if I can help in any other way.\u00a0<\/p>\u00a0<\/p> Would be more than happy to help you.<\/p>","quoteUsername":"AnishWalia20","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}"> 喜欢引用一个 Aleksander p 资源管理器 2个答复 1年前 2021年5月27日你好 @anishwalia20 我正在尝试使用非Admin用户在PC中创建VM，然后收到： “无权访问资源。<请求'http://xxxx.xxxx.xxx:9440/v3/vms'[post]>” 我已经在VM Creation许可中创建角色，并向用户和目录图像创建一个项目。 “基本上，克隆和快照具有非应用程序或广告用户的VM不幸的是，到目前为止，PC上的Custom RBAC（角色库访问控制）角色是不可能的。当前，SSP/RBAC没有REST API或UI支持来克隆用户VM” 这适用于我想做的？ Hello @AnishWalia20<\/user-mention>\u00a0<\/p>I\u2019m trying to create a VM in PC with non-admin user, and I receive :<\/p> \u201cNo permission to access the resource. <Request 'http:\/\/xxxx.xxxx.xxx:9440\/v3\/vms' [POST]>\u201d<\/p><\/blockquote> \u00a0<\/p> I have already create a role with VM creation permission and a project to the user and a Catalog Image.<\/p> \u00a0<\/p> \u201cBasically,\u00a0<\/em>Cloning & snapshotting<\/em>\u00a0a VM with non-admin or AD users belonging to\u00a0<\/em>custom RBAC(role bases access control) roles\u00a0on PC is not possible as of now, unfortunately.\u00a0Currently, SSP\/RBAC does not have a REST API or UI support for cloning a user VM\u201d <\/em><\/p><\/blockquote> \u00a0<\/p> This is applyed to what I want to do?<\/em><\/p>","quoteUsername":"Aleksander P","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}"> 喜欢引用
由内部提供动力条款和条件注册已经有一个帐户？登录使用您的帐户登录登录社区使用您的帐户登录输入您的用户名或电子邮件地址。我们将向您发送带有指令的电子邮件以重置您的密码。用户名或电子邮件返回概述扫描病毒文件。抱歉，我们仍在检查该文件的内容，以确保它可以安全下载。请在几分钟后再试一次。好的该文件无法下载抱歉，我们的病毒扫描仪检测到该文件无法安全下载。好的 Learn more about our cookies.<\/a>","cookiepolicy.button":"Accept cookies","cookiepolicy.button.deny":"Deny all","cookiepolicy.link":"Cookie settings","cookiepolicy.modal.title":"Cookie settings","cookiepolicy.modal.content":"We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.<\/a>","cookiepolicy.modal.level1":"Basic Functional","cookiepolicy.modal.level2":"Normal Functional + analytics","cookiepolicy.modal.level3":"Complete Functional + analytics + social media + embedded videos"}}}">