Users, roles & customer portal

NexoVirt has two kinds of accounts: admins, who use the full panel under /panel, and customers, who use the self-service portal under /portal and only see the servers they own. Both sign in on the same login page with their username or email address. Both are managed from the Users menu (Customers and Admins).

Customers

Users > Customers lists all customer accounts with their email, external ID, status, number of guests and reseller.

• Customer portal (multi-user access): the switch at the top turns customer logins on or off for the whole panel.
• Create customer: email, username and an optional External ID (your own system’s user ID). A password is generated and shown once.
• Row actions: Manage guests, Log in as, Deactivate / Reactivate, Reset password (a new password is shown once) and Delete user.

Caution

Deactivate blocks the customer’s login and shuts down every guest they own. Reactivate allows the login again and starts those guests.

The customer page

Manage guests opens the customer’s page:

• Assigned guests: their guests with a per-guest Snapshot limit (0 = no snapshots) and Unassign. Assign a guest gives them another guest.
• IP pool: grant addresses from an IP zone (a number of addresses or specific ones) that the customer can attach to their own servers; Revoke takes one back.
• Self-service resource pack: see Resource packs.

A guest has exactly one owner. You can also set it with the Owner field when creating a guest, on the guest’s General section, or through the REST API.

Admins and roles

Users > Admins lists administrator accounts. Add admin and Edit set the username, email, password, Role and Status. The edit page also offers Reset password, Reset two-factor (clears the admin’s 2FA, the lockout escape hatch) and Delete admin. You cannot delete your own account, and the last super-admin can be neither deleted nor demoted.

With an Enterprise license, admins get one of three built-in roles:

Role	Can do
Super Admin	Everything.
Operator	Day-to-day operations: guests, power, consoles, NAT, PCIe, firewall, OS templates, IP zones, backups and alerts.
Read Only	View the panel and the audit log, no changes.

Settings > Roles shows the permissions of each role (read-only). A role change takes effect on the admin’s next login. In the Community edition every admin is a Super Admin. Admins can also sign in through single sign-on.

Impersonation

Log in as (on the Customers list and as Log in as customer on the customer page) switches your session to that customer’s portal, so you see exactly what they see. A banner stays visible the whole time; Return to admin brings you back to your own account. The portal’s ownership checks apply unchanged, it works even while the customer portal is switched off, and every impersonation is recorded in the audit log.

The customer portal

The portal menu has My Servers, SSH keys, VPN (Enterprise), IP addresses and Security.

• My Servers: the customer’s guests with live status, IP, type and resources, and Console, Start, Reboot and Stop buttons. With a resource pack assigned, the remaining budget and a Create server button show here.
• The server page shows the CPU, memory, storage and uptime cards, live charts and the power and Console buttons, with these sections:
  • Overview: details and live CPU, memory, traffic and storage charts.
  • Snapshots: only when the customer’s snapshot limit for this server is above 0.
  • Firewall: the customer adds and edits their own rules and applies presets. Rules an admin created are shown but cannot be changed.
  • OS & reinstall: wipe and reinstall the server, and Reset root password for containers.
• SSH keys: the customer’s public keys, offered when a server is created or reinstalled.
• IP addresses: the addresses granted to the customer, with their zone and the server they are assigned to. The customer assigns a free address to one of their servers or unassigns it.
• VPN: WireGuard configs for the customer’s own devices. Each device only reaches the customer’s servers or their SDN projects. See WireGuard VPN.
• Security: Change password (with the current password) and two-factor authentication. An admin impersonating the customer cannot change the customer’s password.

Caution

Every portal request checks ownership on the server. A customer can never see or touch a guest that is not theirs, even by guessing a URL.

SSH keys

Admins store their SSH public keys on their profile page, customers under SSH keys in the portal. When creating or reinstalling a guest, the owner’s keys are offered as pre-checked options next to a paste field, and the selected keys are installed into the guest. With at least one key, the root password is optional. Admins can see a customer’s keys (name and fingerprint only, never the key itself).

Profile and two-factor authentication

Admins open their profile with Settings in the user menu (top right): account details, a profile picture, Change password, SSH keys and two-factor authentication. In the portal, the same menu item opens the Security page with Change password and two-factor authentication.

To enable TOTP two-factor authentication, click Enable two-factor, scan the QR code with an authenticator app (or enter the key manually) and confirm with a code. You receive 8 single-use recovery codes, shown once. From then on every login asks for a code from the app or a recovery code. Disabling 2FA or regenerating recovery codes requires a current code.

Tip

Logins are throttled against brute force. An admin locked out of 2FA can be reset by another admin with Reset two-factor.

Audit log

Monitoring > Audit log records security-relevant actions, such as logins and logouts, impersonation, node changes, user and admin changes, 2FA changes and image downloads, in a filterable table. Each guest also keeps its own permanent activity log of every lifecycle event, whether it came from NexoVirt or directly from Proxmox.

Next steps

• Plans & quotas for the plan section on a customer’s guests.
• Alerts & webhooks for who gets notified.
• REST API for token-based automation instead of a user login.