Privilege Level | Required Permissions |
---|
Direct SAN Access Mode | Virtual Appliance Mode | Network Mode |
Cryptographic operations | Direct Access | Direct Access | Direct Access |
Datastore | Allocate space Browse datastore Configure datastore Low-level file operations Remove file | Allocate space Browse datastore Configure datastore Low-level file operations Remove file | Allocate space Browse datastore Configure datastore Low-level file operations Remove file |
Global | Disable methods Enable methods Licenses Log event Manage custom attributes Set custom attribute | Disable methods Enable methods Licenses Log event Manage custom attributes Set custom attribute | Disable methods Enable methods Licenses Log event Manage custom attributes Set custom attribute |
Network | Assign network | Assign network | Assign network |
Resource | Assign virtual machine to resource pool | Assign virtual machine to resource pool | Assign virtual machine to resource pool |
Datastore cluster | Configure a datastore cluster | Configure a datastore cluster | Configure a datastore cluster |
Profile-driven storage (for VMware vSphere prior to 8.x) | Profile-driven storage update Profile-driven storage view | Profile-driven storage update Profile-driven storage view | Profile-driven storage update Profile-driven storage view |
VM storage policies (for VMware starting from 8.x) | Update VM storage policies View VM storage policies | Update VM storage policies View VM storage policies | Update VM storage policies View VM storage policies |
vApp | Add virtual machine Assign resource pool Unregister | Add virtual machine Assign resource pool Unregister | Add virtual machine Assign resource pool Unregister |
Virtual Machine | Change Configuration | Acquire disk lease Add new disk Advanced configuration Change Settings Extend virtual disk Modify device settings Toggle disk change tracking | Acquire disk lease Add existing disk Add new disk Advanced configuration Change Settings Change resource Extend virtual disk Modify device settings Remove disk Toggle disk change tracking | Acquire disk lease Add new disk Advanced configuration Change Settings Extend virtual disk Modify device settings Toggle disk change tracking |
Edit Inventory | Create new Register Remove | Create new Register Remove | Create new Register Remove |
Guest operations | Guest operation modifications Guest operation program execution Guest operation queries | Guest operation modifications Guest operation program execution Guest operation queries | Guest operation modifications Guest operation program execution Guest operation queries |
Interaction | Connect devices Guest operating system management by VIX API | Connect devices Guest operating system management by VIX API | Connect devices Guest operating system management by VIX API |
Provisioning | Allow disk access Allow read-only disk access Allow virtual machine download | Allow disk access Allow read-only disk access Allow virtual machine download | Allow disk access Allow read-only disk access Allow virtual machine download |
Snapshot Management | Create snapshot Remove snapshot Rename snapshot Revert to snapshot | Create snapshot Remove snapshot Rename snapshot Revert to snapshot | Create snapshot Remove snapshot Rename snapshot Revert to snapshot |