{"url":"https://nexovirt.com/features/security","title":"Proxmox panel users, roles, 2FA & audit log · NexoVirt","description":"Admins and customers with strict guest ownership, TOTP two-factor login, impersonation for support and an audit log of every sensitive action in NexoVirt.","markdown_url":"https://nexovirt.com/features/security.md","sections":[{"heading":"Users, roles and 2FA for your Proxmox panel","content":"NexoVirt separates admins from customers: admins manage everything, customers only see the guests they own, checked on the server for every request. Both protect their login with TOTP two-factor, and every sensitive action lands in an audit log.\n\n[Install free](https://docs.nexovirt.com/getting-started/installation/) [Read the Users, access & security guide](https://docs.nexovirt.com/guides/users/)\n\n![Users, access & security in the NexoVirt panel](https://nexovirt.com/assets/img/screenshots/users-light.webp?v=1792068738)"},{"heading":"What it does","content":"Admins and customers, guest ownership, TOTP 2FA, impersonation and an audit log.\n\n- ### Ownership, checked every time\n\nEvery portal read and action checks guest ownership on the server, so a customer can never reach a guest that is not theirs.\n- ### TOTP two-factor\n\nOpt-in 2FA with any authenticator app and eight single-use recovery codes, for admins and customers. The secret is encrypted at rest.\n- ### Impersonation for support\n\nAdmins \"log in as\" a customer through a real customer session, with a visible banner and an audit entry.\n- ### Audit log\n\nLogins, impersonation, host and user changes and 2FA events in one filterable log.\n- ### SSO and team roles\n\nThe Business plan adds single sign-on through your identity provider (OIDC) and team roles."},{"heading":"Why not just use the Proxmox web UI?","content":"Proxmox VE runs the virtualization. NexoVirt adds the layer around it. Users, access & security, task by task:\n\n| Task | Proxmox web UI | NexoVirt |\n|---|---|---|\n| Give a customer one VM | User, pool and permission entries per VM | Pick the owner on the guest page |\n| See what a customer sees | Not possible without their login | \"Log in as\" with a banner and audit entry |\n| Who did what | Task log per node | One audit log for the whole panel |"},{"heading":"How to use it","content":"Up and running in 3 steps, all in the panel.\n\n1. Create customers and assign guest ownership in Users.\n2. Turn on 2FA in your profile and ask your admins to do the same.\n3. Review activity any time in the audit log.\n\n[Users, access & security: step-by-step guide in the docs](https://docs.nexovirt.com/guides/users/)"},{"heading":"See it in the panel","content":"Real screenshots from NexoVirt, with demo data.\n\n![TOTP two-factor with recovery codes.](https://nexovirt.com/assets/img/screenshots/profile-2fa-light.webp?v=1792068738)\n\nTOTP two-factor with recovery codes.\n\n![The filterable audit log.](https://nexovirt.com/assets/img/screenshots/audit-light.webp?v=1792068738)\n\nThe filterable audit log."},{"heading":"Related pages","content":"- [ Proxmox customer portal What customers see, and what they never see. ](https://nexovirt.com/proxmox-customer-portal)\n- [ Customer portal A scoped self-service portal, so customers manage their own servers. ](https://nexovirt.com/features/portal)\n- [ In-browser console An xterm.js terminal with a noVNC fallback, right in the browser. ](https://nexovirt.com/features/console)\n- [ Alerting & webhooks Rule-based alerts to the inbox, email and webhooks, including Discord and Google Chat. ](https://nexovirt.com/features/alerting)\n- [ All features Everything NexoVirt adds to Proxmox VE. ](https://nexovirt.com/features)"},{"heading":"Start running NexoVirt today","content":"Free for homelabs with unlimited VMs on up to 2 nodes. Running a hosting business? Upgrade in place when you grow, no migration.\n\n[Install free](https://docs.nexovirt.com/getting-started/installation/) [See pricing](https://nexovirt.com/pricing)"}],"faq":[]}