Create admin user: Difference between revisions

Revision as of 18:19, 1 July 2025

1. Create user:

USER="asd"; \
PASS="asd"; \
COMMENT="System Administrator"; \
if ! id "$USER" &>/dev/null; then \
  sudo useradd -m -s /bin/bash "$USER" && echo "$USER:$PASS" | sudo chpasswd; \
fi; \
pveum groupadd admin --comment "${COMMENT} group" 2>/dev/null; \
pveum aclmod / --group admin --role Administrator; \
pveum useradd "${USER}@pam" --comment "${COMMENT}" --groups admin 2>/dev/null

2. Remove:

USER="asd"; \
sudo deluser --remove-home "$USER"; \
pveum user delete "${USER}@pam" 2>/dev/null; \
pveum group remove admin 2>/dev/null

3. Disable root access for GUI (optional):

pveum user modify root@pam --enable 0

There are cases when you need it, to enable:

pveum user modify root@pam --enable 1

@@ Line 4: / Line 4: @@
 <syntaxhighlight lang="bash">
-VAR_USERNAME=<username>
+USER="asd"; \
-useradd -m -s /bin/bash -G sudo ${VAR_USERNAME} && pveum user add ${VAR_USERNAME}@pam
+PASS="asd"; \
+COMMENT="System Administrator"; \
-</syntaxhighlight>
+if ! id "$USER" &>/dev/null; then \
+  sudo useradd -m -s /bin/bash "$USER" && echo "$USER:$PASS" | sudo chpasswd; \
-. Create the group:
+fi; \
+pveum groupadd admin --comment "${COMMENT} group" 2>/dev/null; \
-<syntaxhighlight lang="bash">
+pveum aclmod / --group admin --role Administrator; \
-pveum group add admin -comment "System Administrators"
+pveum useradd "${USER}@pam" --comment "${COMMENT}" --groups admin 2>/dev/null
-pveum acl modify / -group admin -role Administrator
 </syntaxhighlight>
+. Remove:
-. Assign group to user:
 <syntaxhighlight lang="bash">
-pveum user modify <user>@pam -group admin
+USER="asd"; \
+sudo deluser --remove-home "$USER"; \
+pveum user delete "${USER}@pam" 2>/dev/null; \
+pveum group remove admin 2>/dev/null
 </syntaxhighlight>
-+1. Disable root on gui (optional):
+. Disable root access for GUI (optional):
 <syntaxhighlight lang="bash">
@@ Line 31: / Line 30: @@
 </syntaxhighlight>
-There are usecases when you need it, to enable
+There are cases when you need it, to enable:
 <syntaxhighlight lang="bash">
 pveum user modify root@pam --enable 1
 </syntaxhighlight>