> i would like to allow a group of ldap users access to pve. But it seems this is > not possible. I have to specifiy the access level for each user. > Is this correct? Yes. I you really need that you can write some import script. Maybe we can add an LDAP configuration option like 'import ....', and the pvedaemon syncs those users?