It would be helpful to be able to set a permission for new vm's provisioned on RHEV compute resources to be provisioned with. More than one permission might be a nice touch, but given that you can assign a group one is probably sufficient.

The benefit to this is that if we give users access to manage or use their VM's in RHEV via the user portal we can give them access via a group permission so they can see only their vm's. Without such an option we'd have to give them access to view/manage all vm's, even those that do not belong to them.

As it stands now Foreman sets no permission, so users have to be Admins in RHEV to see the VM's.