> from api, why can’t use other user privileges? What's the point? This is a bug. I just fixed that here: https://git.proxmox.com/?p=pve-firewall.git;a=commitdiff;h=959ab51c8f4127a43f1708d4d7e135de1819e638