Privilege Level | Required Permissions |
---|
Direct SAN Access Mode | Virtual Appliance Mode | Network Mode |
Cryptographic operations | Direct Access | Direct Access | Direct Access |
dvPort Group | Create Delete | Create Delete | Create Delete |
Datastore | Allocate space Browse datastore Low-level file operations Remove file | Allocate space Browse datastore Configure datastore (if you restore to vSAN datastore) Low-level file operations Remove file | Allocate space Browse datastore Configure datastore (if you restore to vSAN datastore) Low-level file operations Remove file |
Folder | Create folder | Create folder | Create folder |
Global | Disable methods Enable methods Licenses Log event | Disable methods Enable methods Licenses Log event | Disable methods Enable methods Licenses Log event |
vSphere Tagging | Assign or Unassign vSphere Tag Assign or Unassign vSphere Tag on Object | Assign or Unassign vSphere Tag Assign or Unassign vSphere Tag on Object | Assign or Unassign vSphere Tag Assign or Unassign vSphere Tag on Object |
Network | Assign network Configure | Assign network Configure | Assign network Configure |
Resource | Assign virtual machine to resource pool | Assign virtual machine to resource pool | Assign virtual machine to resource pool |
Profile-driven storage (for VMware vSphere prior to 8.x) | Profile-driven storage update Profile-driven storage view | Profile-driven storage update Profile-driven storage view | Profile-driven storage update Profile-driven storage view |
VM storage policies (for VMware starting from 8.x) | Update VM storage policies View VM storage policies | Update VM storage policies View VM storage policies | Update VM storage policies View VM storage policies |
vApp | Add virtual machine Assign resource pool Unregister | Add virtual machine Assign resource pool Unregister | Add virtual machine Assign resource pool Unregister |
Virtual Machine | Change Configuration | Acquire disk lease Add existing disk Add new disk Advanced configuration Change Settings Modify device settings Remove disk Toggle disk change tracking | Add existing disk Add new disk Advanced configuration Change Settings Modify device settings Remove disk Toggle disk change tracking | Add existing disk Add new disk Advanced configuration Change Settings Modify device settings Remove disk Toggle disk change tracking |
Edit Inventory | Register Remove | Create Register Remove | Create Register Remove |
Interaction | Device connection Power Off Power On | Device connection Power Off Power On | Device connection Power Off Power On |
Provisioning | Allow disk access Allow read-only disk access Allow virtual machine download Allow virtual machine files upload Mark as template* Mark as virtual machine* | Allow disk access Allow read-only disk access Allow virtual machine download Allow virtual machine files upload Mark as template* Mark as virtual machine* | Allow disk access Allow read-only disk access Allow virtual machine download Allow virtual machine files upload Mark as template* Mark as virtual machine* |
Snapshot Management | Create snapshot Remove snapshot Revert to snapshot | Create snapshot Remove snapshot Revert to snapshot | Create snapshot Remove snapshot Revert to snapshot |