Understanding roles for customers in SolusVM 2

Bato Tsydenov

Updated October 30, 2026 14:34

Applicable to:

SolusVM 2

Question

How do roles and permissions work for customers in SolusVM 2, and how to allow or restrict specific actions (for example, managing backups or uploading custom ISO images)?

Answer

A role in SolusVM 2 is a set of permissions. There are four types of permissions:

Manage: Lets the user manage entities in SolusVM 2.
Get: Lets the user retrieve information about entities. Some UI operations need this information before the action itself. For example, to create a VPS from the client area, the client needs the get locations, get os images, and get applications permissions.
View: Lets the user see particular parts of the GUI.
Additional: Includes usage statistic, access billing bypass, resize servers, and delete servers. Some of these are parts of a Manage permission. For example, resize servers and delete servers are part of manage servers.

Manage permissions take priority over Additional permissions. A user with manage servers can resize and delete servers even if the role does not include resize servers or delete servers.

Common scenarios

Restrict customers from managing backups

Create a custom role without the backup permissions and assign it to the customer. For details, see the User Access Control documentation. If backups are enabled in the VM’s plan, clients can create and restore backups from the client panel.

Allow customers to create a server from a backup (“Unauthorised” error)

The built-in ADMIN and CLIENT roles cannot be edited or deleted, and CLIENT has a fixed set of permissions. To grant Manage backups, create a custom role that includes it and assign that role to the users. There is no supported way to add a permission to the CLIENT role by default for all existing and new users. Changes made directly in the database, such as adding a row to role_has_permissions, do not persist after a Docker restart.

Allow customers to upload their own ISO images

Grant the following permissions:

Manage owned ISO images
get ISO images
Boot from ISO images

Use Manage owned ISO images only for ISO images added by the user. Customers cannot add ISO images without these permissions.

Note: - Role management is available only to administrators.
- The Manage OS images permission allows managing all OS images. Do not grant it to customers who only need their own ISO images.