CDP Failback

Below are vCenter Server granular permissions required for CDP failback:

Privilege Level

Required Permissions

Datastore

Allocate space
Browse datastore
Low-level file operations
Remove file

Global

Disable methods
Enable methods
Licenses
Log event

vSphere Tagging

Assign or Unassign vSphere Tag

Resource

Assign virtual machine to resource pool

Profile-driven storage (for VMware vSphere prior to 8.x)

Profile-driven storage update
Profile-driven storage view

VM storage policies (for VMware starting from 8.x)

Update VM storage policies
View VM storage policies

Virtual Machine

Change Configuration

Acquire disk lease
Add existing disk
Add new disk
Advanced configuration
Change Settings
Remove disk
Rename
Toggle disk change tracking

Edit Inventory

Register

Interaction

Power Off
Power On

Provisioning

Allow disk access
Allow read-only disk access
Allow virtual machine download

Snapshot Management

Create snapshot
Remove snapshot
Revert to snapshot

Page updated 12/18/2023

Page content applies to build 12.2.0.334