hi,

thanks all for your input. I got it working creating an Idm group 'libvirt' and adding the pertinent AD external groups to this idm posix group called libvirt.  Now I can connect to the system bus and watch the serial console of the vm as a normal user.

Thanks,

--

regards,

Natxo