Error listing files from datastore using API Token as credentials about terraform-provider-proxmox HOT 2 CLOSED

I have done further researches and tests:

• If I am creating this resource file by using the username and the password of the said user, it works fine
• If the resource file is created on another datastore (such as the default one called local) it doesn't work and give the same exact error but with the permission being about the said datastore (Reason: Permission check failed (/storage/local, Datastore.Audit|Datastore.AllocateSpace))

So this issue is not related to CephFS at all; it is more about API tokens' permissions. I created a custom role with all the permissions enabled for the user, so the permissions errors on Datastore.Audit/AllocateSpace is odd.

EDIT: I recreated my user but using CLI this time instead of creating it using Terraform, and there is no error, the instanciation of the resource file is working great. I give the following code block, maybe there are some error in the way I created my user

resource "proxmox_virtual_environment_user" "user" {
	user_id = "terraform@pve"
	password = "incrediblepassword"
	comment = "User managed by Terraform used to create token"	
	acl {
		path = "/"
		propagate = true
		role_id = "Administrator"
	}
}

resource "proxmox_virtual_environment_user_token" "token" {
	token_name = "terratoken"	
	user_id = proxmox_virtual_environment_user.user.user_id
}

output "token_value" {
	value = proxmox_virtual_environment_user_token.token.value
	sensitive =  true
}

EDIT²: I have try to create the user using the provider (same hcl code as before), but instead of creating the token with the provider, I created by hand. With that way it is working, so there might be something to dig down here.

from terraform-provider-proxmox.

Ok I found the issue. When I created the user, I did not set the privileges_separations. So by default the API token had restricted privileges.
Doesn't it makes more sense to implement this feature the other way around? Just like the behavior of Proxmox, where the privileges separation are false/deactivated by default.

from terraform-provider-proxmox.