Create admin user - Revision history

Gyurci08 at 22:04, 10 October 2025

2025-10-10T22:04:36Z

← Older revision		Revision as of 22:04, 10 October 2025
Line 67:		Line 67:
	* All commands must be executed with root privileges (via shell or sudo).		* All commands must be executed with root privileges (via shell or sudo).

	[[Category:Proxmox VE 9]]		[[Category:Proxmox VE]]

Gyurci08 at 22:02, 10 October 2025

2025-10-10T22:02:25Z

← Older revision		Revision as of 22:02, 10 October 2025
Line 1:		Line 1:
	== ~~Install <code>sudo</code>~~ on Proxmox VE 9 ==		== Create Admin on Proxmox VE 9 ==

	=== 1. Install <code>sudo</code> (if not present) ===		=== 1. Install <code>sudo</code> (if not present) ===

Gyurci08 at 22:02, 10 October 2025

2025-10-10T22:02:05Z

← Older revision		Revision as of 22:02, 10 October 2025
Line 1:		Line 1:
	== Install <code>sudo</code> on Proxmox ==		== Install <code>sudo</code> on Proxmox VE 9 ==

	=== 1. Install <code>sudo</code> (if not present) ===		=== 1. Install <code>sudo</code> (if not present) ===
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	apt update && apt install sudo		apt update && apt install -y sudo
	</syntaxhighlight>		</syntaxhighlight>

	=== 2. Create an Administrative User ===		=== 2. Create an Administrative User ===
	The script ~~below~~ will:		The following script will:
	* Create a new user (replace <code>asd</code> and password as needed).		* Create a new local Linux user (replace <code>asd</code> and password as needed).
	* Add the user to the <code>sudo</code> group.		* Add the user to the <code>sudo</code> group.
	* Create an ~~admin~~ group in Proxmox's user management.		* Create an <code>admins</code> group in Proxmox user management.
	* Assign the <code>Administrator</code> role.		* Assign the <code>Administrator</code> role to the group.
			* Add the user to the Proxmox permission system with PAM authentication.

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
Line 17:		Line 18:
	PASS="asd"		PASS="asd"
	COMMENT="System Administrator"		COMMENT="System Administrator"

			# Create local user if not existing
	if ! id "$USER" &>/dev/null; then		if ! id "$USER" &>/dev/null; then
	~~sudo~~ useradd -m -s /bin/bash -G sudo "$USER" && echo "$USER:$PASS" \| ~~sudo~~ chpasswd		useradd -m -s /bin/bash -G sudo "$USER"
			echo "$USER:$PASS" \| chpasswd
	fi		fi
	pveum groupadd ~~admin~~ --comment "${COMMENT} group" ~~2>/dev/null~~
	pveum ~~aclmod~~ / --group ~~admin~~ --role Administrator		# Create admin group in Proxmox (ignore error if it exists)
	pveum ~~useradd~~ "${USER}@pam" --comment "${COMMENT}" --groups ~~admin 2>/dev/null~~		pveum groupadd admins --comment "${COMMENT} group" \|\| true

			# Assign Administrator role to the group (root-level permission)
			pveum acl modify / --group admins --role Administrator

			# Add user to Proxmox user database (PAM authentication)
			pveum user add "${USER}@pam" --comment "${COMMENT}" --groups admins \|\| true
	</syntaxhighlight>		</syntaxhighlight>

	=== 3. Remove the Created User and Group ===		=== 3. Remove the Created User and Group ===
	To ~~delete~~ the user and associated group:		To cleanly remove the user and associated group from both Linux and Proxmox:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	USER="asd"		USER="asd"
	~~sudo~~ deluser --remove-home "$USER"
	pveum user delete "${USER}@pam" ~~2>/dev/null~~		# Remove local Linux user
	pveum group ~~remove admin 2>/dev/null~~		deluser --remove-home "$USER"

			# Remove from Proxmox permission system
			pveum user delete "${USER}@pam" \|\| true
			pveum group delete admins \|\| true
	</syntaxhighlight>		</syntaxhighlight>

	=== 4. (Optional) Disable Root GUI Access ===		=== 4. (Optional) Disable Root GUI Access ===
	For ~~enhanced~~ security, disable root ~~login for the Proxmox web~~ GUI:		For improved security, it is recommended to disable the default <code>root@pam</code> account GUI access once an administrative user exists:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
Line 42:		Line 56:
	</syntaxhighlight>		</syntaxhighlight>

	==== To re-enable root access ~~to GUI~~: ====		==== To re-enable root GUI access: ====
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	pveum user modify root@pam --enable 1		pveum user modify root@pam --enable 1
Line 48:		Line 62:

	'''Notes:'''		'''Notes:'''
	* ~~Change all hardcoded credentials~~ before ~~using in~~ production!		* Always update default passwords before production use.
	* ~~Assigning~~ <code>Administrator</code> to ~~a non-~~root ~~user allows you to safely disable root UI~~ access.		* The <code>admins</code> group will retain <code>Administrator</code> privileges assigned through the ACL.
	* All commands ~~require~~ root/sudo ~~privileges on your Proxmox host~~.		* Be sure to have at least one active administrative account before disabling root GUI access.
			* All commands must be executed with root privileges (via shell or sudo).

	[[Category:Proxmox VE]]		[[Category:Proxmox VE 9]]

Gyurci08 at 09:59, 27 August 2025

2025-08-27T09:59:17Z

← Older revision		Revision as of 09:59, 27 August 2025
Line 52:		Line 52:
	* All commands require root/sudo privileges on your Proxmox host.		* All commands require root/sudo privileges on your Proxmox host.

	[[Category:Proxmox]]		[[Category:Proxmox VE]]

Gyurci08 at 11:43, 15 July 2025

2025-07-15T11:43:57Z

← Older revision		Revision as of 11:43, 15 July 2025
Line 1:		Line 1:
	~~[[Category:~~Proxmox]]		== Install <code>sudo</code> on Proxmox ==

			=== 1. Install <code>sudo</code> (if not present) ===
			<syntaxhighlight lang="bash">
			apt update && apt install sudo
			</syntaxhighlight>

	1. Create user:		=== 2. Create an Administrative User ===
			The script below will:
			* Create a new user (replace <code>asd</code> and password as needed).
			* Add the user to the <code>sudo</code> group.
			* Create an admin group in Proxmox's user management.
			* Assign the <code>Administrator</code> role.

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	USER="asd"~~; \~~		USER="asd"
	PASS="asd"~~; \~~		PASS="asd"
	COMMENT="System Administrator"~~; \~~		COMMENT="System Administrator"
	if ! id "$USER" &>/dev/null; then \		if ! id "$USER" &>/dev/null; then
	sudo useradd -m -s /bin/bash "$USER" && echo "$USER:$PASS" \| sudo chpasswd~~; \~~		sudo useradd -m -s /bin/bash -G sudo "$USER" && echo "$USER:$PASS" \| sudo chpasswd
	fi~~; \~~		fi
	pveum groupadd admin --comment "${COMMENT} group" 2>/dev/null~~; \~~		pveum groupadd admin --comment "${COMMENT} group" 2>/dev/null
	pveum aclmod / --group admin --role Administrator~~; \~~		pveum aclmod / --group admin --role Administrator
	pveum useradd "${USER}@pam" --comment "${COMMENT}" --groups admin 2>/dev/null		pveum useradd "${USER}@pam" --comment "${COMMENT}" --groups admin 2>/dev/null
	</syntaxhighlight>		</syntaxhighlight>

	2. Remove:		=== 3. Remove the Created User and Group ===
			To delete the user and associated group:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	USER="asd"~~; \~~		USER="asd"
	sudo deluser --remove-home "$USER"~~; \~~		sudo deluser --remove-home "$USER"
	pveum user delete "${USER}@pam" 2>/dev/null~~; \~~		pveum user delete "${USER}@pam" 2>/dev/null
	pveum group remove admin 2>/dev/null		pveum group remove admin 2>/dev/null
	</syntaxhighlight>		</syntaxhighlight>

	3. Disable root ~~access~~ for GUI ~~(optional)~~:		=== 4. (Optional) Disable Root GUI Access ===
			For enhanced security, disable root login for the Proxmox web GUI:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
Line 30:		Line 42:
	</syntaxhighlight>		</syntaxhighlight>

	~~There are cases when you need it,~~ to ~~enable~~:		==== To re-enable root access to GUI: ====

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	pveum user modify root@pam --enable 1		pveum user modify root@pam --enable 1
	</syntaxhighlight>		</syntaxhighlight>

			'''Notes:'''
			* Change all hardcoded credentials before using in production!
			* Assigning <code>Administrator</code> to a non-root user allows you to safely disable root UI access.
			* All commands require root/sudo privileges on your Proxmox host.

			[[Category:Proxmox]]

Gyurci08 at 18:19, 1 July 2025

2025-07-01T18:19:01Z

← Older revision		Revision as of 18:19, 1 July 2025
Line 4:		Line 4:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	~~VAR_USERNAME~~=~~<username~~>		USER="asd"; \
	useradd -m -s /bin/bash ~~-G sudo~~ $~~{VAR_USERNAME}~~ && ~~pveum user add~~ $~~{VAR_USERNAME}@pam~~		PASS="asd"; \
			COMMENT="System Administrator"; \
	~~</syntaxhighlight>~~		if ! id "$USER" &>/dev/null; then \
			sudo useradd -m -s /bin/bash "$USER" && echo "$USER:$PASS" \| sudo chpasswd; \
	~~2. Create the group~~:		fi; \
			pveum groupadd admin --comment "${COMMENT} group" 2>/dev/null; \
	~~<syntaxhighlight lang="bash">~~		pveum aclmod / --group admin --role Administrator; \
	pveum ~~group add~~ admin -comment "~~System Administrators~~"		pveum useradd "${USER}@pam" --comment "${COMMENT}" --groups admin 2>/dev/null


	pveum ~~acl modify~~ / -group admin -role Administrator
	</syntaxhighlight>		</syntaxhighlight>

			2. Remove:
	3. ~~Assign group to user~~:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	pveum user ~~modify <user>~~@pam -group admin		USER="asd"; \
			sudo deluser --remove-home "$USER"; \
			pveum user delete "${USER}@pam" 2>/dev/null; \
			pveum group remove admin 2>/dev/null
	</syntaxhighlight>		</syntaxhighlight>

	3+1. Disable root ~~on gui~~ (optional):		3. Disable root access for GUI (optional):

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
Line 31:		Line 30:
	</syntaxhighlight>		</syntaxhighlight>

	There are ~~usecases~~ when you need it, to enable		There are cases when you need it, to enable:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	pveum user modify root@pam --enable 1		pveum user modify root@pam --enable 1
	</syntaxhighlight>		</syntaxhighlight>

Gyurci08 at 17:46, 13 February 2025

2025-02-13T17:46:54Z

← Older revision		Revision as of 17:46, 13 February 2025
Line 2:		Line 2:

	1. Create user:		1. Create user:

	~~os level~~

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	useradd -s /bin/bash -~~m <~~user>		VAR_USERNAME=<username>
	~~</syntaxhighlight>~~		useradd -m -s /bin/bash -G sudo ${VAR_USERNAME} && pveum user add ${VAR_USERNAME}@pam


	~~pve level~~

	~~<syntaxhighlight lang="bash">~~
	~~pveum user add <user>@pam~~
	</syntaxhighlight>		</syntaxhighlight>

Line 38:		Line 31:
	</syntaxhighlight>		</syntaxhighlight>

	There are ~~use cases~~ when you need it, to enable		There are usecases when you need it, to enable

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	pveum user modify root@pam --enable 1		pveum user modify root@pam --enable 1
	</syntaxhighlight>		</syntaxhighlight>

Gyurci08 at 11:47, 29 August 2024

2024-08-29T11:47:32Z

← Older revision		Revision as of 11:47, 29 August 2024
Line 1:		Line 1:
			[[Category:Proxmox]]

	1. Create user:		1. Create user:

Gyurci08 at 08:39, 29 August 2024

2024-08-29T08:39:00Z

← Older revision		Revision as of 08:39, 29 August 2024
Line 15:		Line 15:
	</syntaxhighlight>		</syntaxhighlight>

	2.		2. Create the group:

			<syntaxhighlight lang="bash">
			pveum group add admin -comment "System Administrators"


			pveum acl modify / -group admin -role Administrator
			</syntaxhighlight>


			3. Assign group to user:

			<syntaxhighlight lang="bash">
			pveum user modify <user>@pam -group admin
			</syntaxhighlight>

			3+1. Disable root on gui (optional):

			<syntaxhighlight lang="bash">
			pveum user modify root@pam --enable 0
			</syntaxhighlight>

			There are use cases when you need it, to enable

			<syntaxhighlight lang="bash">
			pveum user modify root@pam --enable 1
			</syntaxhighlight>

Gyurci08 at 08:33, 29 August 2024

2024-08-29T08:33:36Z

← Older revision		Revision as of 08:33, 29 August 2024
Line 5:		Line 5:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	useradd -s /bin/bash -m ~~gyurci08~~		useradd -s /bin/bash -m <user>
	</syntaxhighlight>		</syntaxhighlight>

Line 12:		Line 12:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	pveum user add ~~gyurci08~~@pam		pveum user add <user>@pam
	</syntaxhighlight>		</syntaxhighlight>

	2.		2.