Entire VM Restore

Below are vCenter Server granular permissions required for entire VM restore:

Privilege Level

Required Permissions

Direct SAN Access Mode

Virtual Appliance Mode

Network Mode

Cryptographic operations

Direct Access

Direct Access

Direct Access

dvPort Group

Create
Delete

Create
Delete

Create
Delete

Datastore

Allocate space
Browse datastore
Low-level file operations
Remove file

Allocate space
Browse datastore
Configure datastore (if you restore to vSAN datastore)
Low-level file operations
Remove file

Allocate space
Browse datastore
Configure datastore (if you restore to vSAN datastore)
Low-level file operations
Remove file

Folder

Create folder

Create folder

Create folder

Global

Disable methods
Enable methods
Licenses
Log event

Disable methods
Enable methods
Licenses
Log event

Disable methods
Enable methods
Licenses
Log event

vSphere Tagging

Assign or Unassign vSphere Tag
Assign or Unassign vSphere Tag on Object

Assign or Unassign vSphere Tag
Assign or Unassign vSphere Tag on Object

Assign or Unassign vSphere Tag
Assign or Unassign vSphere Tag on Object

Network

Assign network
Configure

Assign network
Configure

Assign network
Configure

Resource

Assign virtual machine to resource pool

Assign virtual machine to resource pool

Assign virtual machine to resource pool

Profile-driven storage (for VMware vSphere prior to 8.x)

Profile-driven storage update
Profile-driven storage view

Profile-driven storage update
Profile-driven storage view

Profile-driven storage update
Profile-driven storage view

VM storage policies (for VMware starting from 8.x)

Update VM storage policies
View VM storage policies

Update VM storage policies
View VM storage policies

Update VM storage policies
View VM storage policies

vApp

Add virtual machine
Assign resource pool
Unregister

Add virtual machine
Assign resource pool
Unregister

Add virtual machine
Assign resource pool
Unregister

Virtual Machine

Change Configuration

Acquire disk lease
Add existing disk
Add new disk
Advanced configuration
Change Settings
Modify device settings
Remove disk
Toggle disk change tracking

Add existing disk
Add new disk
Advanced configuration
Change Settings
Modify device settings
Remove disk
Toggle disk change tracking

Add existing disk
Add new disk
Advanced configuration
Change Settings
Modify device settings
Remove disk
Toggle disk change tracking

Edit Inventory

Register
Remove

Create
Register
Remove

Create
Register
Remove

Interaction

Device connection
Power Off
Power On

Device connection
Power Off
Power On

Device connection
Power Off
Power On

Provisioning

Allow disk access
Allow read-only disk access
Allow virtual machine download
Allow virtual machine files upload
Mark as template*
Mark as virtual machine*

Allow disk access
Allow read-only disk access
Allow virtual machine download
Allow virtual machine files upload
Mark as template*
Mark as virtual machine*

Allow disk access
Allow read-only disk access
Allow virtual machine download
Allow virtual machine files upload
Mark as template*
Mark as virtual machine*

Snapshot Management

Create snapshot
Remove snapshot
Revert to snapshot

Create snapshot
Remove snapshot
Revert to snapshot

Create snapshot
Remove snapshot
Revert to snapshot

* required for template restore

Page updated 9/23/2024

Page content applies to build 12.2.0.334