Users, roles and 2FA for your Proxmox panel
NexoVirt separates admins from customers: admins manage everything, customers only see the guests they own, checked on the server for every request. Both protect their login with TOTP two-factor, and every sensitive action lands in an audit log.
What it does
Admins and customers, guest ownership, TOTP 2FA, impersonation and an audit log.
-
Ownership, checked every time
Every portal read and action checks guest ownership on the server, so a customer can never reach a guest that is not theirs.
-
TOTP two-factor
Opt-in 2FA with any authenticator app and eight single-use recovery codes, for admins and customers. The secret is encrypted at rest.
-
Impersonation for support
Admins "log in as" a customer through a real customer session, with a visible banner and an audit entry.
-
Audit log
Logins, impersonation, host and user changes and 2FA events in one filterable log.
-
SSO and team roles
The Business plan adds single sign-on through your identity provider (OIDC) and team roles.
Why not just use the Proxmox web UI?
Proxmox VE runs the virtualization. NexoVirt adds the layer around it. Users, access & security, task by task:
| Task | Proxmox web UI | NexoVirt |
|---|---|---|
| Give a customer one VM | User, pool and permission entries per VM | Pick the owner on the guest page |
| See what a customer sees | Not possible without their login | "Log in as" with a banner and audit entry |
| Who did what | Task log per node | One audit log for the whole panel |
How to use it
Up and running in 3 steps, all in the panel.
-
Create customers and assign guest ownership in Users.
-
Turn on 2FA in your profile and ask your admins to do the same.
-
Review activity any time in the audit log.
See it in the panel
Real screenshots from NexoVirt, with demo data.
Start running NexoVirt today
Free for homelabs with unlimited VMs on up to 2 nodes. Running a hosting business? Upgrade in place when you grow, no migration.