portainer/portainer · error

privileged mode disabled for non administrator users

Error message

privileged mode disabled for non administrator users

What it means

Error "privileged mode disabled for non administrator users" thrown in portainer/portainer.

Source

Thrown at api/stacks/stackutils/validation.go:76

			}

			if isBind {
				return fmt.Errorf("volume %q: bind-mount disabled for non administrator users", volumeKey)
			}
		}
	}

	for _, service := range composeConfig.Services {
		if !config.SecuritySettings.AllowBindMountsForRegularUsers {
			for _, volume := range service.Volumes {
				if docker.IsBindMount(docker.MountDescriptor{Type: volume.Type}) {
					return errors.New("bind-mount disabled for non administrator users")
				}
			}
		}

		if !config.SecuritySettings.AllowPrivilegedModeForRegularUsers && service.Privileged {
			return errors.New("privileged mode disabled for non administrator users")
		}

		if !config.SecuritySettings.AllowHostNamespaceForRegularUsers && service.Pid == "host" {
			return errors.New("pid host disabled for non administrator users")
		}

		if !config.SecuritySettings.AllowDeviceMappingForRegularUsers && len(service.Devices) > 0 {
			return errors.New("device mapping disabled for non administrator users")
		}

		if !config.SecuritySettings.AllowSysctlSettingForRegularUsers && len(service.Sysctls) > 0 {
			return errors.New("sysctl setting disabled for non administrator users")
		}

		if !config.SecuritySettings.AllowSecurityOptForRegularUsers && len(service.SecurityOpt) > 0 {
			return errors.New("security-opt setting disabled for non administrator users")
		}

View on GitHub (pinned to 17e74456ff)

When it happens

Trigger: Thrown at api/stacks/stackutils/validation.go:76 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of portainer/portainer@17e74456ff (2026-08-26). Data as JSON: /api/errors/f56a63b7c2f7c4e3. Report an issue: GitHub.