Basics
Projects, ownership and permissions: the three ideas the rest of the portal is built on.
What Verlocx is
Verlocx is a self-service layer over your Proxmox VE clusters, with VMware vSphere in preparation. Members create VMs, restart services or extend a lab machine's lifetime themselves, within limits that admins configure. The hypervisor stays the source of truth; Verlocx adds projects, permissions, ownership, automation and an audit trail on top.
- Organization: the top level. Clusters, identity providers, pricing, mail settings and feature flags live here.
- Projects: everything you work with (VMs, templates, snapshots, backups, network views, leases, alerts, members and settings) is scoped to a project. You are always in exactly one project.
- VMs: every VM belongs to one project and has an owner.
Projects
- Switch projects from the project switcher; every page you open is scoped to the current project.
- Each project has an Overview dashboard with permission-gated resource tiles, your own VMs, cluster health, storage assignments and the latest activity.
- New projects are created with a short wizard (name, slug and description, accent color, review). It needs org.settings, and the creator becomes project admin of the new project.
- Members get access per project: a role plus optional extra or revoked permissions. See Access control.
Ownership and visibility
Every VM is owned by a user or by a directory group. Owners receive alerts and lease reminders, and ownership decides what people without the “view all” permissions can see.
| Permission | What you see |
|---|---|
| vm.view | Only VMs you or one of your groups own |
| vm.view.all | Every VM in the project |
The same owned-versus-all split exists for snapshots, backups, network, leases and alerts. It is enforced in the interface and again on the server for every call.
Finding your way around
- Project work lives in the project's tabs; global tools such as Deployments, Clusters, High Availability, Fleet, Organization, Identity providers and Feature flags sit in the sidebar.
- The command search (Ctrl+K or Cmd+K) jumps to any page, VM, cluster, user, group or role you are allowed to see.
- The notification bell collects lease warnings, alerts and other messages. Clicking a VM-related notification opens that VM with the full message; “Mark all as read” clears the list.
- Changes stream in live: power states, provisioning progress and agent heartbeats update without a page reload.
Signing in
- Sign in with your directory (AD/LDAP) username and password, or with Microsoft if your organization has connected Entra ID.
- Sessions use an httpOnly cookie with a sliding 8-hour idle timeout. Signing out revokes the session immediately.
- Your display name, email and title come from the identity provider and are read-only in the portal.
Locked out of a page? Every denied access is recorded in the Activity log together with the permission that was missing, which tells an admin exactly what to grant.
Features on this page
- Projects
- Owned versus all visibility
- Notifications
- Command search
- Live updates
More in Getting startedAll topics
Access controlRoles, per-person extras and revokes, custom roles, role preview and personal API keys.Access controlRoles, per-person extras and revokes, custom roles, role preview and personal API keys.Create a VMThe seven-step New VM wizard, how names map to VMIDs, placement, and what happens after Create.