pveum

List users

$ pveum user list

$ pveum user add [username]@pve

$ pveum user add [username]@pve --email [email] --comment [description] --password [password]

$ pveum passwd [username]@pve

$ pveum user delete [username]@pve

$ pveum acl modify /vms/1000 --user [username]@pve --role PVEVMUser

pveum command [subcommand] [options]

pveum manages Proxmox VE users, groups, roles, and access control lists. It configures authentication realms (PAM, PVE, LDAP, Active Directory) and permission assignments for cluster resources.
The permission system uses a path-based model where access is granted at specific resource paths (datacenter, nodes, VMs, storage) with roles defining allowed operations.

user list, u l

List all users

Add new user

Delete user

Change user password

Modify access control list

List groups

List roles

Assign role (PVEAdmin, PVEVMUser, etc.)

User email address

User description

User realms (@pve, @pam, @ldap) determine authentication method. Permission changes take effect immediately. Built-in root@pam cannot be deleted. Some operations require PVEUserAdmin role.

Part of Proxmox VE, providing fine-grained access control for multi-user virtualization environments. Supports enterprise features like LDAP/AD integration and two-factor authentication.

pvesh(1), qm(1), pct(1)