and then i'll add him and here he is now if i go here to my proxmox server and then click on shell if you recall earlier i mentioned that the etsy password file is where the user accounts are actually stored let's check that out and here's my user that's the pam user that i created earlier for myself but notice that spock is not listed here at all so what you can glean from that is when you add a proxmox user that user is not actually a system user it's not a linux system user it doesn't exist in the linux system normally and proxmox users are generally used to manage the proxmox system itself so if you wanted to invite a co-worker for example to log into the server and help create some vms for you maybe manage the vms things like that then you'll generally want to create users like that in the proxmox authentication server and for the majority of your needs that's more than sufficient so if that's really all you need then why would you even want to create a pam user the thing is pam users they can use ssh to log into the server so by me creating j in the pam realm that means that that particular user is able to log into the server via ssh and manage it via the command line a proxmox user is not able to do that now sure a proxmox user can click on shell like i've done numerous times so far and manage it via the command line that way but they wouldn't be able to log into the actual system via ssh unless they had a pam account in fact you don't even have to add a pam user here to proxmox at all you just add it to the underlying linux server the underlying proxmox server and that's fine so the main takeaway so far is that if you want to create a user to access the server via ssh then you want to do so with pam and it's a good idea to add that pam user here to the proxmox gui now if you want to allow someone to manage vms via the gui the web console here then you want to create that user in the pve realm like this one so this user here exists on the proxmox server but it doesn't exist on the underlying linux server itself but now you know the difference but the thing is though regardless of which of these two users i logged into the server with neither of them are able to do anything so what we want to do right now is actually try to fix that now what i want to do first and foremost is add a new group and what i'm going to do is create that group right here and just keep it simple what i'm going to do is call the group admins now notice that there's no configuration here whatsoever other than the fact that i could type a comment but what i'm doing is creating a group and that's really all i can do here i could create a group and that's it there's no permissions options here at all but i do need to make sure that this group does exist before we continue
NO_SEGMENT_TOKEN