Cumulative Permissions

Cryptographic operations1

Add disk
Direct Access
Encrypt
Encrypt new
Migrate

dvPort Group

Create
Delete
Modify

Datastore

Allocate space
Browse datastore
Configure datastore
Low-level file operations
Remove file

Datastore cluster

Configure a datastore cluster

Extension

Register extension
Unregister extension

Folder

Create folder
Delete folder

Global

Diagnostics2
Disable methods
Enable methods
Licenses
Log event
Manage custom attributes
Set custom attribute
Settings

Host

Configuration

Advanced settings
Maintenance
Network configuration
Query patch
Storage partition configuration

Network

Assign network
Configure

Profile-driven storage (for VMware vSphere prior to 8.x)

Profile-driven storage update
Profile-driven storage view

VM storage policies (for VMware starting from 8.x)

Apply VM storage policies
Update VM storage policies
View VM storage policies

Resource

Assign virtual machine to resource pool
Create resource pool
Migrate powered off virtual machine
Migrate powered on virtual machine
Remove resource pool

Virtual Machine

Change Configuration

Acquire disk lease
Add existing disk
Add new disk
Add or remove device
Advanced configuration
Change settings
Change resource
Configure RAW device3
Extend virtual disk
Modify device settings
Remove disk
Rename
Set annotation
Toggle disk change tracking

Edit Inventory

Create
Move
Register
Remove
Unregister

Guest operations

Guest operation modifications
Guest operation program execution
Guest operation queries

Interaction

Configure CD media
Configure floppy media
Console interaction
Connect devices
Guest operating system management by VIX API
Power Off
Power On
Suspend

Provisioning

Allow disk access
Allow read-only disk access
Allow virtual machine download
Allow virtual machine files upload
Mark as template4
Mark as virtual machine4

Snapshot Management

Create snapshot
Remove snapshot
Rename snapshot
Revert to snapshot

vSphere Tagging

Assign or Unassign vSphere Tag
Assign or Unassign vSphere Tag on Object