ISSUE TYPE

• Improvement Request

COMPONENT NAME

API

CLOUDSTACK VERSION

4.19.02

CONFIGURATION

Ubuntu 22.04
KVM

OS / ENVIRONMENT

N/A

SUMMARY

A user in an account with the default out of the box role "Domain Admin" is unable to add the extraconfig parameter via API. Running this same API command as Root Admin works just fine.

STEPS TO REPRODUCE

Ensure that the 2 options are set and reboot mgmt:
allow.additional.vm.configuration.list.kvm = backend, tpm, devices
Enable additional vm configuration = enabled
Build an account & user with the out of the box role "Domain Admin"
Build an instance normally, however, make sure the Start Instance ratio is unselected at the bottom.
Run the API command to modify add the extra config. Running this command does not work under an account with out of the box default "Domain Admin" role.

https://example.com/client/api?command=updateVirtualMachine&id=<ID_Here>&extraconfig=%3Cdevices%3E%0A%3Ctpm%20model%3D%22tpm-tis%22%3E%0A%3Cbackend%20type%3D%22emulator%22%20version%3D%222.0%22%2F%3E%0A%3C%2Ftpm%3E%0A%3C%2Fdevices%3E

EXPECTED RESULTS

extraconfig added to the VM.

ACTUAL RESULTS

API returns results with no error, however, extraconfig is not added.