Security & Access Paid advanced
API Token Manager
Create, rotate, and revoke service and user API tokens with scoped permissions.
User Management & Access
Users, groups, roles, SSO, MFA and API token governance.
ProxmoxVEx wraps infrastructure in a security model that scales from home labs to service providers. Create local users or connect LDAP and OIDC, define custom roles and permissions, and enforce TOTP or FIDO2 for sensitive actions.
API tokens are scoped, rotatable and fully audited, so every programmatic access decision is traceable in the tamper-evident log.
Capabilities
Centrally manage users and groups, assign fine-grained roles, enable LDAP or OIDC single sign-on, enforce MFA and audit every API token.
- ✓Local, LDAP and OIDC user directories
- ✓Role-based access control with custom roles
- ✓TOTP and FIDO2 multi-factor authentication
- ✓Scoped API token lifecycle
- ✓HMAC-signed audit log of every access decision
Related plugins
Plugins that extend this capability.
Security & Access Paid advanced
Enhanced Audit Search
Full-text, date-range, and user-filtered search over the tamper-evident audit log.
Access & Portal Free basic
Client Portal
Self-service portal for hosting customers. Clients see only their assigned VMs.
Security Paid corporate
IDS / IPS
Intrusion Detection and Prevention System: monitored segments, signatures, anomaly detection, alerts, and response policies.
Security Free basic
RBAC Explorer
Explore roles, users, tenants, and permissions across the system.
Security & Access Free basic
Tenant Isolation
Enforce resource, network, and permission boundaries between tenants.
Security & Access Free basic
VM Tag Enforcer
Enforce and remediate VM tag compliance rules.