Map vSphere API privileges to vSphere Web Client UI

Version 4

    Developers who work with the vSphere API (usually in Java or C#) ask how they can map privileges in the API to privilege strings in the vSphere Client. In the table below, ¬ represents indentation for the privilege hierarchy in the UI. Last updated for vSphere 6.5.

     

    Privilege in vSphere APILabel in vSphere Client UI
    Alarm"Alarms"
    Alarm.Acknowledge¬ "Acknowledge alarm"
    Alarm.Create¬ "Create alarm"
    Alarm.Delete¬ "Remove alarm"
    Alarm.DisableActions¬ "Disable alarm action"
    Alarm.Edit¬ "Modify alarm"
    Alarm.SetStatus¬ "Set alarm status"
    Authorization"Permissions"
    Authorization.ModifyPermissions¬ "Modify permission"
    Authorization.ModifyPrivileges¬ "Modify privilege"
    Authorization.ModifyRoles¬ "Modify role"
    Authorization.ReassignRolePermissions¬ "Reassign role permissions"
    Certificate"Certificates"
    Certificate.Manage¬ "Manage certificates"
    ComputeResource"Compute resource"
    Cryptographer"Cryptographic operations"
    Cryptographer.Access¬ "Direct Access"
    Cryptographer.AddDisk¬ "Add disk"
    Cryptographer.Clone¬ "Clone"
    Cryptographer.Decrypt¬ "Decrypt"
    Cryptographer.Encrypt¬ "Encrypt"
    Cryptographer.EncryptNew¬ "Encrypt new"
    Cryptographer.ManageEncryptionPolicy¬ "Manage encryption policies"
    Cryptographer.ManageKeyServers¬ "Manage KMS"
    Cryptographer.ManageKeys¬ "Manage keys"
    Cryptographer.Migrate¬ "Migrate"
    Cryptographer.Recrypt¬ "Recrypt"
    Cryptographer.RegisterHost¬ "Register host"
    Cryptographer.RegisterVM¬ "Register VM"
    DVPortgroup"dvPort group"
    DVPortgroup.Create¬ "Create"
    DVPortgroup.Delete¬ "Delete"
    DVPortgroup.Modify¬ "Modify"
    DVPortgroup.PolicyOp¬ "Policy operation"
    DVPortgroup.ScopeOp¬ "Scope operation"
    DVSwitch"Distributed switch"
    DVSwitch.Create¬ "Create"
    DVSwitch.Delete¬ "Delete"
    DVSwitch.HostOp¬ "Host operation"
    DVSwitch.Modify¬ "Modify"
    DVSwitch.Move¬ "Move"
    DVSwitch.PolicyOp¬ "Policy operation"
    DVSwitch.PortConfig¬ "Port configuration operation"
    DVSwitch.PortSetting¬ "Port setting operation"
    DVSwitch.ResourceManagement¬ "Network I/O control operation"
    DVSwitch.Vspan¬ "VSPAN operation"
    Datacenter"Datacenter"
    Datacenter.Create¬ "Create datacenter"
    Datacenter.Delete¬ "Remove datacenter"
    Datacenter.IpPoolConfig¬ "Network protocol profile configuration"
    Datacenter.IpPoolQueryAllocations¬ "Query IP pool allocation"
    Datacenter.IpPoolReleaseIp¬ "Release IP allocation"
    Datacenter.Move¬ "Move datacenter"
    Datacenter.Reconfigure¬ "Reconfigure datacenter"
    Datacenter.Rename¬ "Rename datacenter"
    Datastore"Datastore"
    Datastore.AllocateSpace¬ "Allocate space"
    Datastore.Browse¬ "Browse datastore"
    Datastore.Config¬ "Configure datastore"
    Datastore.Delete¬ "Remove datastore"
    Datastore.DeleteFile¬ "Remove file"
    Datastore.FileManagement¬ "Low level file operations"
    Datastore.Move¬ "Move datastore"
    Datastore.Rename¬ "Rename datastore"
    Datastore.UpdateVirtualMachineFiles¬ "Update virtual machine files"
    Datastore.UpdateVirtualMachineMetadata¬ "Update virtual machine metadata"
    EAM"ESX Agent Manager"
    EAM.Config¬ "Config"
    EAM.Modify¬ "Modify"
    EAM.View¬ "View"
    Extension"Extension"
    Extension.Register¬ "Register extension"
    Extension.Unregister¬ "Unregister extension"
    Extension.Update¬ "Update extension"
    ExternalStatsProvider"External stats provider"
    ExternalStatsProvider.Register¬ "Register"
    ExternalStatsProvider.Unregister¬ "Unregister"
    ExternalStatsProvider.Update¬ "Update"
    Folder"Folder"
    Folder.Create¬ "Create folder"
    Folder.Delete¬ "Delete folder"
    Folder.Move¬ "Move folder"
    Folder.Rename¬ "Rename folder"
    Global"Global"
    Global.CancelTask¬ "Cancel task"
    Global.CapacityPlanning¬ "Capacity planning"
    Global.Diagnostics¬ "Diagnostics"
    Global.DisableMethods¬ "Disable methods"
    Global.EnableMethods¬ "Enable methods"
    Global.GlobalTag¬ "Global tag"
    Global.Health¬ "Health"
    Global.Licenses¬ "Licenses"
    Global.LogEvent¬ "Log event"
    Global.ManageCustomFields¬ "Manage custom attributes"
    Global.ManagePolicies¬ "Manage policies"
    Global.PolicyEditorSuperUser¬ "Policy editor SuperUser"
    Global.Proxy¬ "Proxy"
    Global.ScriptAction¬ "Script action"
    Global.ServiceManagers¬ "Service managers"
    Global.SetCustomField¬ "Set custom attribute"
    Global.Settings¬ "Settings"
    Global.SystemTag¬ "System tag"
    Global.VCServer¬ "Act as vCenter Server"
    HealthUpdateProvider"Health update provider"
    HealthUpdateProvider.Register¬ "Register"
    HealthUpdateProvider.Unregister¬ "Unregister"
    HealthUpdateProvider.Update¬ "Update"
    Host"Host"
    Host.Amqp¬ "AMQP"
    Host.Amqp.AmqpInteraction¬ ¬ "AMQP interaction"
    Host.Cim¬ "CIM"
    Host.Cim.CimInteraction¬ ¬ "CIM interaction"
    Host.Config¬ "Configuration"
    Host.Config.AdvancedConfig¬ ¬ "Advanced settings"
    Host.Config.AuthenticationStore¬ ¬ "Authentication Store"
    Host.Config.AutoStart¬ ¬ "Virtual machine autostart configuration"
    Host.Config.Connection¬ ¬ "Connection"
    Host.Config.DateTime¬ ¬ "Change date and time settings"
    Host.Config.Firmware¬ ¬ "Firmware"
    Host.Config.HyperThreading¬ ¬ "Hyperthreading"
    Host.Config.Image¬ ¬ "Image configuration"
    Host.Config.Locker¬ ¬ "Locker"
    Host.Config.Maintenance¬ ¬ "Maintenance"
    Host.Config.Memory¬ ¬ "Memory configuration"
    Host.Config.NetService¬ ¬ "Security profile and firewall"
    Host.Config.Network¬ ¬ "Network configuration"
    Host.Config.Nvdimm¬ ¬ "NVDIMM"
    Host.Config.Patch¬ ¬ "Query patch"
    Host.Config.PciPassthru¬ ¬ "Change PciPassthru settings"
    Host.Config.Power¬ ¬ "Power"
    Host.Config.Quarantine¬ ¬ "Quarantine"
    Host.Config.Resources¬ ¬ "System resources"
    Host.Config.Settings¬ ¬ "Change settings"
    Host.Config.Snmp¬ ¬ "Change SNMP settings"
    Host.Config.Storage¬ ¬ "Storage partition configuration"
    Host.Config.SystemManagement¬ ¬ "System Management"
    Host.Hbr¬ "vSphere Replication"
    Host.Hbr.HbrManagement¬ ¬ "Manage replication"
    Host.Inventory¬ "Inventory"
    Host.Inventory.AddHostToCluster¬ ¬ "Add host to cluster"
    Host.Inventory.AddStandaloneHost¬ ¬ "Add standalone host"
    Host.Inventory.CreateCluster¬ ¬ "Create cluster"
    Host.Inventory.DeleteCluster¬ ¬ "Remove cluster"
    Host.Inventory.EditCluster¬ ¬ "Modify cluster"
    Host.Inventory.MoveCluster¬ ¬ "Move cluster or standalone host"
    Host.Inventory.MoveHost¬ ¬ "Move host"
    Host.Inventory.RemoveHostFromCluster¬ ¬ "Remove host"
    Host.Inventory.RenameCluster¬ ¬ "Rename cluster"
    Host.Local¬ "Local operations"
    Host.Local.CreateVM¬ ¬ "Create virtual machine"
    Host.Local.DeleteVM¬ ¬ "Delete virtual machine"
    Host.Local.InstallAgent¬ ¬ "Add host to vCenter"
    Host.Local.ManageUserGroups¬ ¬ "Manage user groups"
    Host.Local.ReconfigVM¬ ¬ "Reconfigure virtual machine"
    ImageLibrary"Image library"
    ImageLibrary.Manage¬ "Manage"
    Network"Network"
    Network.Assign¬ "Assign network"
    Network.Config¬ "Configure"
    Network.Delete¬ "Remove"
    Network.Move¬ "Move network"
    Performance"Performance"
    Performance.ModifyIntervals¬ "Modify intervals"
    Policy"Policy"
    Policy.Apply¬ "Apply"
    Profile"Host profile"
    Profile.Clear¬ "Clear"
    Profile.Create¬ "Create"
    Profile.Delete¬ "Delete"
    Profile.Edit¬ "Edit"
    Profile.Export¬ "Export"
    Profile.View¬ "View"
    Resource"Resource"
    Resource.ApplyRecommendation¬ "Apply recommendation"
    Resource.AssignVAppToPool¬ "Assign vApp to resource pool"
    Resource.AssignVMToPool¬ "Assign virtual machine to resource pool"
    Resource.ColdMigrate¬ "Migrate powered off virtual machine"
    Resource.CreatePool¬ "Create resource pool"
    Resource.DeletePool¬ "Remove resource pool"
    Resource.EditPool¬ "Modify resource pool"
    Resource.HotMigrate¬ "Migrate powered on virtual machine"
    Resource.MovePool¬ "Move resource pool"
    Resource.QueryVMotion¬ "Query vMotion"
    Resource.RenamePool¬ "Rename resource pool"
    ScheduledTask"Scheduled task"
    ScheduledTask.Cancel¬ "Cancel task"
    ScheduledTask.Create¬ "Create tasks"
    ScheduledTask.Delete¬ "Remove task"
    ScheduledTask.Edit¬ "Modify task"
    ScheduledTask.Run¬ "Run task"
    Sessions"Sessions"
    Sessions.GlobalMessage¬ "Message"
    Sessions.ImpersonateUser¬ "Impersonate user"
    Sessions.TerminateSession¬ "View and stop sessions"
    Sessions.ValidateSession¬ "Validate session"
    StoragePod"Datastore cluster"
    StoragePod.Config¬ "Configure a datastore cluster"
    StorageProfile"Profile-driven storage"
    StorageProfile.Update¬ "Profile-driven storage update"
    StorageProfile.View¬ "Profile-driven storage view"
    StorageViews"Storage views"
    StorageViews.ConfigureService¬ "Configure service"
    StorageViews.View¬ "View"
    System"System"
    System.Anonymous¬ "Anonymous"
    System.Read¬ "Read"
    System.View¬ "View"
    Task"Tasks"
    Task.Create¬ "Create task"
    Task.Update¬ "Update task"
    TroubleShooting"Troubleshooting"
    TroubleShooting.all¬ "All"
    VApp"vApp"
    VApp.ApplicationConfig¬ "vApp application configuration"
    VApp.AssignResourcePool¬ "Assign resource pool"
    VApp.AssignVApp¬ "Assign vApp"
    VApp.AssignVM¬ "Add virtual machine"
    VApp.Clone¬ "Clone"
    VApp.Create¬ "Create"
    VApp.Delete¬ "Delete"
    VApp.Export¬ "Export"
    VApp.ExtractOvfEnvironment¬ "View OVF environment"
    VApp.Import¬ "Import"
    VApp.InstanceConfig¬ "vApp instance configuration"
    VApp.ManagedByConfig¬ "vApp managedBy configuration"
    VApp.Move¬ "Move"
    VApp.PowerOff¬ "Power off"
    VApp.PowerOn¬ "Power on"
    VApp.Rename¬ "Rename"
    VApp.ResourceConfig¬ "vApp resource configuration"
    VApp.Suspend¬ "Suspend"
    VApp.Unregister¬ "Unregister"
    VirtualMachine"Virtual machine"
    VirtualMachine.Config¬ "Configuration"
    VirtualMachine.Config.AddExistingDisk¬ ¬ "Add existing disk"
    VirtualMachine.Config.AddNewDisk¬ ¬ "Add new disk"
    VirtualMachine.Config.AddRemoveDevice¬ ¬ "Add or remove device"
    VirtualMachine.Config.AddRemoveRawDevice¬ ¬ "Add/remove raw device"
    VirtualMachine.Config.AdvancedConfig¬ ¬ "Advanced"
    VirtualMachine.Config.Annotation¬ ¬ "Set annotation"
    VirtualMachine.Config.CPUCount¬ ¬ "Change CPU count"
    VirtualMachine.Config.ChangeTracking¬ ¬ "Disk change tracking"
    VirtualMachine.Config.DiskExtend¬ ¬ "Extend virtual disk"
    VirtualMachine.Config.DiskLease¬ ¬ "Disk lease"
    VirtualMachine.Config.EditDevice¬ ¬ "Modify device settings"
    VirtualMachine.Config.HostUSBDevice¬ ¬ "Host USB device"
    VirtualMachine.Config.ManagedBy¬ ¬ "Configure managedBy"
    VirtualMachine.Config.Memory¬ ¬ "Memory"
    VirtualMachine.Config.MksControl¬ ¬ "Display connection settings"
    VirtualMachine.Config.QueryFTCompatibility¬ ¬ "Query Fault Tolerance compatibility"
    VirtualMachine.Config.QueryUnownedFiles¬ ¬ "Query unowned files"
    VirtualMachine.Config.RawDevice¬ ¬ "Raw device"
    VirtualMachine.Config.ReloadFromPath¬ ¬ "Reload from path"
    VirtualMachine.Config.RemoveDisk¬ ¬ "Remove disk"
    VirtualMachine.Config.Rename¬ ¬ "Rename"
    VirtualMachine.Config.ResetGuestInfo¬ ¬ "Reset guest information"
    VirtualMachine.Config.Resource¬ ¬ "Change resource"
    VirtualMachine.Config.Settings¬ ¬ "Settings"
    VirtualMachine.Config.SwapPlacement¬ ¬ "Swapfile placement"
    VirtualMachine.Config.UpgradeVirtualHardware¬ ¬ "Upgrade virtual machine compatibility"
    VirtualMachine.GuestOperations¬ "Guest operations"
    VirtualMachine.GuestOperations.Execute¬ ¬ "Guest operation program execution"
    VirtualMachine.GuestOperations.Modify¬ ¬ "Guest operation modifications"
    VirtualMachine.GuestOperations.ModifyAliases¬ ¬ "Guest operation alias modification"
    VirtualMachine.GuestOperations.Query¬ ¬ "Guest operation queries"
    VirtualMachine.GuestOperations.QueryAliases¬ ¬ "Guest operation alias query"
    VirtualMachine.Hbr¬ "vSphere Replication"
    VirtualMachine.Hbr.ConfigureReplication¬ ¬ "Configure replication"
    VirtualMachine.Hbr.MonitorReplication¬ ¬ "Monitor replication"
    VirtualMachine.Hbr.ReplicaManagement¬ ¬ "Manage replication"
    VirtualMachine.Interact¬ "Interaction"
    VirtualMachine.Interact.AnswerQuestion¬ ¬ "Answer question"
    VirtualMachine.Interact.Backup¬ ¬ "Backup operation on virtual machine"
    VirtualMachine.Interact.ConsoleInteract¬ ¬ "Console interaction"
    VirtualMachine.Interact.CreateScreenshot¬ ¬ "Create screenshot"
    VirtualMachine.Interact.CreateSecondary¬ ¬ "Turn on Fault Tolerance"
    VirtualMachine.Interact.DefragmentAllDisks¬ ¬ "Defragment all disks"
    VirtualMachine.Interact.DeviceConnection¬ ¬ "Device connection"
    VirtualMachine.Interact.DisableSecondary¬ ¬ "Suspend Fault Tolerance"
    VirtualMachine.Interact.DnD¬ ¬ "Drag and drop"
    VirtualMachine.Interact.EnableSecondary¬ ¬ "Resume Fault Tolerance"
    VirtualMachine.Interact.GuestControl¬ ¬ "Guest operating system management by VIX API"
    VirtualMachine.Interact.MakePrimary¬ ¬ "Test failover"
    VirtualMachine.Interact.Pause¬ ¬ "Pause or Unpause"
    VirtualMachine.Interact.PowerOff¬ ¬ "Power off"
    VirtualMachine.Interact.PowerOn¬ ¬ "Power on"
    VirtualMachine.Interact.PutUsbScanCodes¬ ¬ "Inject USB HID scan codes"
    VirtualMachine.Interact.Record¬ ¬ "Record session on virtual machine"
    VirtualMachine.Interact.Replay¬ ¬ "Replay session on virtual machine"
    VirtualMachine.Interact.Reset¬ ¬ "Reset"
    VirtualMachine.Interact.SESparseMaintenance¬ ¬ "Perform wipe or shrink operations"
    VirtualMachine.Interact.SetCDMedia¬ ¬ "Configure CD media"
    VirtualMachine.Interact.SetFloppyMedia¬ ¬ "Configure floppy media"
    VirtualMachine.Interact.Suspend¬ ¬ "Suspend"
    VirtualMachine.Interact.TerminateFaultTolerantVM¬ ¬ "Test restart Secondary VM"
    VirtualMachine.Interact.ToolsInstall¬ ¬ "VMware Tools install"
    VirtualMachine.Interact.TurnOffFaultTolerance¬ ¬ "Turn off Fault Tolerance"
    VirtualMachine.Inventory¬ "Inventory"
    VirtualMachine.Inventory.Create¬ ¬ "Create new"
    VirtualMachine.Inventory.CreateFromExisting¬ ¬ "Create from existing"
    VirtualMachine.Inventory.Delete¬ ¬ "Remove"
    VirtualMachine.Inventory.Move¬ ¬ "Move"
    VirtualMachine.Inventory.Register¬ ¬ "Register"
    VirtualMachine.Inventory.Unregister¬ ¬ "Unregister"
    VirtualMachine.Namespace¬ "Service configuration"
    VirtualMachine.Namespace.Event¬ ¬ "Allow notifications"
    VirtualMachine.Namespace.EventNotify¬ ¬ "Allow polling of global event notifications"
    VirtualMachine.Namespace.Management¬ ¬ "Manage service configurations"
    VirtualMachine.Namespace.ModifyContent¬ ¬ "Modify service configuration"
    VirtualMachine.Namespace.Query¬ ¬ "Query service configurations"
    VirtualMachine.Namespace.ReadContent¬ ¬ "Read service configuration"
    VirtualMachine.Provisioning¬ "Provisioning"
    VirtualMachine.Provisioning.Clone¬ ¬ "Clone virtual machine"
    VirtualMachine.Provisioning.CloneTemplate¬ ¬ "Clone template"
    VirtualMachine.Provisioning.ConsolidateDisks¬ ¬ "Consolidate disks"
    VirtualMachine.Provisioning.CreateTemplateFromVM¬ ¬ "Create template from virtual machine"
    VirtualMachine.Provisioning.Customize¬ ¬ "Customize"
    VirtualMachine.Provisioning.DeployTemplate¬ ¬ "Deploy template"
    VirtualMachine.Provisioning.DiskRandomAccess¬ ¬ "Allow disk access"
    VirtualMachine.Provisioning.DiskRandomRead¬ ¬ "Allow read-only disk access"
    VirtualMachine.Provisioning.FileRandomAccess¬ ¬ "Allow file access"
    VirtualMachine.Provisioning.GetVmFiles¬ ¬ "Allow virtual machine download"
    VirtualMachine.Provisioning.MarkAsTemplate¬ ¬ "Mark as template"
    VirtualMachine.Provisioning.MarkAsVM¬ ¬ "Mark as virtual machine"
    VirtualMachine.Provisioning.ModifyCustSpecs¬ ¬ "Modify customization specification"
    VirtualMachine.Provisioning.PromoteDisks¬ ¬ "Promote disks"
    VirtualMachine.Provisioning.PutVmFiles¬ ¬ "Allow virtual machine files upload"
    VirtualMachine.Provisioning.ReadCustSpecs¬ ¬ "Read customization specifications"
    VirtualMachine.State¬ "Snapshot management"
    VirtualMachine.State.CreateSnapshot¬ ¬ "Create snapshot"
    VirtualMachine.State.RemoveSnapshot¬ ¬ "Remove snapshot"
    VirtualMachine.State.RenameSnapshot¬ ¬ "Rename snapshot"
    VirtualMachine.State.RevertToSnapshot¬ ¬ "Revert to snapshot"