--- title: "Proxmox customer portal with tenant isolation ยท NexoVirt" description: "A Proxmox customer portal with hard tenant isolation: each customer sees only their own VMs, never the Proxmox UI or your admin panel. Free on 2 nodes." url: https://nexovirt.com/proxmox-customer-portal --- # A Proxmox customer portal that keeps every tenant isolated A Proxmox customer portal gives each customer a login that shows only the VMs and containers they own. NexoVirt keeps every tenant isolated: it checks ownership on the server for every page and every click, so a customer never reaches another tenant's guest, your admin panel or the Proxmox login. [Install free](https://docs.nexovirt.com/getting-started/installation/) [How isolation works](#isolation-heading) Looking for Proxmox's own subscription portal (my.proxmox.com)? This is something else: a portal for **your** customers, self-hosted on your infrastructure. ![The NexoVirt Proxmox customer portal showing one customer's own servers](https://nexovirt.com/assets/img/screenshots/portal-light.webp?v=1792068738) A customer signs in and sees their own servers, nothing else. ## What can a customer reach in the portal? Their own guests and the tools to run them. Every request is scoped to the signed-in customer before it touches Proxmox. - ### Their servers, nobody else's The list shows only the VMs and LXC containers assigned to that customer. A guessed or edited URL returns "not found", with no hint of another tenant's VM ID or hostname. - ### Actions checked on the server Start, shut down, reboot and stop pass an ownership check before the request reaches Proxmox, not just a hidden button in the browser. - ### A console without Proxmox credentials The text terminal (xterm.js) and graphical screen (noVNC) run through NexoVirt's own origin. The Proxmox session stays on your server. - ### Two-factor sign-in per account Customers turn on app-based 2FA (TOTP) with recovery codes. The 2FA secret is stored encrypted. - ### SSH keys per customer Each customer manages their own public keys, which are injected into new servers via cloud-init. Keys never leak into another account. - ### Metrics without a path to Proxmox Live CPU, RAM, disk and network charts are served from NexoVirt's own database. The customer's browser never connects to a Proxmox host. ## How does the portal keep customers apart? Every page view and every action runs an ownership check on the server. A guest the customer does not own does not exist for them. Customers sign in to a separate portal area. Your admin panel sits behind its own role check, so a customer account cannot open it even with the right URL. What customers never get: - Proxmox credentials or access to the Proxmox web UI - Your admin panel, your nodes or any other customer's data - The Proxmox session behind the console (the browser only sees the terminal) When support uses "log in as customer", the panel switches to a real customer session with the same limits, so helping a customer never widens what that account can reach. ![Two-factor authentication settings on a customer's security page in the NexoVirt portal](https://nexovirt.com/assets/img/screenshots/portal-security-light.webp?v=1792068738) Each customer secures their own account with two-factor sign-in. ## What stays on the admin side? You decide who owns what and you can trace every change. None of it is visible to customers. - ### Ownership you assign Assign any VM or container to a customer from the admin panel, the customer's page or the REST API. One owner per guest, changeable at any time. - ### Support access without new rights "Log in as customer" shows exactly what the customer sees and returns to admin in one click. Every impersonation is recorded. - ### An audit log for incidents Logins, impersonations, host changes, user actions and 2FA events land in a filterable audit log, so you can answer "who did what, when". - ### A partner tier when you need it On Unlimited, resellers get their own scoped portal for their sub-customers, with quotas you set. See the reseller portal. ## Before you open it to customers The questions hosts ask first, answered in a line each. - ### Does Proxmox change? No. NexoVirt talks to the Proxmox REST API. Your hosts, storage and the Proxmox web UI keep working as before. - ### What if a host is down? The portal reads from NexoVirt's own inventory, so it still loads and shows the last known state instead of an error page. - ### Where does customer data live? On your servers. NexoVirt is self-hosted, so accounts, keys and guests never pass through a third party. - ### Will it cut tickets too? Yes. Reboots, reinstalls, console access and password resets become self-service. The self-service portal page covers that side. ## Proxmox customer portal FAQ What is a Proxmox customer portal?A scoped, multi-tenant self-service area where each customer sees and manages only their own VMs and containers: power controls, an in-browser console, live metrics, SSH keys and 2FA, without ever touching the Proxmox web UI. Can customers self-service without access to Proxmox?Yes. Customers only reach the portal; the Proxmox VE UI and your admin panel stay completely separate and hidden. Is the portal multi-tenant and isolated?Yes. The server checks ownership on every page view and every action, so a customer can never see or touch a guest they do not own, even by editing a URL. Does the portal include a console?Yes, an in-browser console (an xterm.js serial terminal plus noVNC) proxied through NexoVirt's own origin, so the Proxmox credentials never reach the browser. Can customers manage SSH keys and two-factor auth?Yes, each customer manages their own SSH keys and can enable TOTP two-factor authentication on their account. Does NexoVirt offer a partner or reseller portal for Proxmox?Yes. On the Unlimited plan, a reseller tier lets partners manage their own sub-customers and guests within quotas you set, from the same self-service portal, so you can run a Proxmox partner or reseller programme without exposing your admin panel or the Proxmox UI. Can the portal cut support tickets too?Yes. Customers handle routine requests themselves (reboot, console, reinstall, SSH keys, password resets). The self-service portal page covers that side in detail; this page focuses on isolation and security. ## Related pages - [ Proxmox self-service portal Which tickets customers handle themselves. ](https://nexovirt.com/proxmox-self-service-portal) - [ Reseller and partner portal A scoped tier for partners and their customers. ](https://nexovirt.com/proxmox-reseller-portal) - [ Portal for an existing cluster Adopt running VMs, no rebuild. ](https://nexovirt.com/proxmox-portal-existing-cluster) - [ Security features 2FA, audit log, encrypted secrets. ](https://nexovirt.com/features/security) - [ Cloud-init on Proxmox How SSH keys reach a new server. ](https://nexovirt.com/blog/cloud-init-on-proxmox) - [ For hosting providers The full hosting toolkit on Proxmox. ](https://nexovirt.com/for/hosting-providers) ## Start running NexoVirt today Free for homelabs with unlimited VMs on up to 2 nodes. Running a hosting business? Upgrade in place when you grow, no migration. [Install free](https://docs.nexovirt.com/getting-started/installation/) [See pricing](https://nexovirt.com/pricing)