Thanks to VMware vCenter Server (VCSA), you can manage many things, including: your hosts (VMware ESXi), your clusters, your datastores, ...
You can also access the consoles of your different virtual machines.
However, in business, you will necessarily need to provide limited access to some features of VMware vCenter Server (VCSA) to different users.
To do this, VMware allows you to use predefined roles or create your own to grant permissions to different users and/or user groups on different objects (hosts, virtual machines, datastores, ...).
To be able to grant rights (called "privileges" in VMware vCenter Server) to users or user groups, you will need to use or create new roles.
Roles are sets of privileges that you can grant to users or groups of users on the desired objects.
To access the list of predefined roles and/or add others, go to the vSphere Client menu and click: Administration.
Then, go to the section: Access control -> Roles.
As you can see, around ten predefined roles already exist in VMware vCenter Server.
Among these, you will find examples that will allow you to easily grant the necessary privileges for different common actions that you would like to delegate to different users.
In VMware vCenter Server, these predefined roles are:
When you select a role, for example "Virtual machine user (sample)", vSphere Client will show you a description of that role defined on your VMware vCenter Server (VCSA).
For the "Virtual machine user (sample)" role, VMware tells you that this role will allow the user to interact with the desired virtual machine(s).
In the "Usage" tab of the selected role, you will be able to find out:
In the "Privileges" tab of the selected role, you will be able to know the list of privileges that will be granted to the desired users thanks to this role.
Note that these are sorted by privilege categories.
In the case of this role "Virtual machine user (sample)", you will see that this will allow the user to:
For more information regarding all existing privileges under VMware vCenter Server (VCSA), see the "Defined Privileges" page of the official VMware documentation.
For the "Virtual machine power user (sample)" role, VMware will tell you that you will be able to interact, but also manage the configuration of virtual machines.
To learn more about the privileges that will be granted to this user through this role, go to the "Privileges" tab.
As you can see, thanks to this role, the user will be able to:
To add a new custom role, click the "+" icon at the top of the list of roles available on your VMware vCenter Server (VCSA).
In the "New Role" window that appears, you can carefully select which privileges you wish to grant or not.
Obviously, all the privileges available under VMware vCenter Server are categorized using a series of privilege categories, some of which are:
Once you have selected the desired privileges, specify a name and a description (optional) for this new role and click on: Finish.
The new role created appears in the list and the list of privileges selected for it is displayed in the "Privileges" tab of this role.
VMware 8/12/2022
VMware 8/31/2022
VMware 5/30/2022
VMware 5/22/2024
Pinned content
Contact
® InformatiWeb-Pro.net - InformatiWeb.net 2008-2022 - © Lionel Eppe - All rights reserved.
Total or partial reproduction of this site is prohibited and constitutes an infringement punishable by articles L.335-2 and following of the intellectual property Code.
You must be logged in to post a comment