> vms are grouped by pool (1 pool by customer by example), but the template > need to be available across differents pools. I will introduce a new permission called VM.Copy, and a new role: PVETemplateUser ==> VM.Copy So you can simply assign that role to the template for selected users and groups. Isn't that good enough?