VMware Cloud Community
Mr_Flibble1
Enthusiast
Enthusiast

Oops, mangled VI Center permissions.

On our test machines, ESX 3.5, VI Center 2.5 I was playing around with the permissions on one of the images. I deleted "Domain Admins" from the permissions list on the VM, but left a test user access with "VM Power User settings". Right after I did this, the VM vanished from my sight, as I am a domain admin. I can still log in as the test user and gain access to the image (or direct through ESX and root).

I now have no administrator level privileges to this VM, so now I can no longer edit the permissions on the machine and restore access to my regular user. It turns out that this machine has no access other than the test user. Thus, I have no access to modify the image as the test user does not have that level of access!

I know I can just turn the VM off, and bring it back in under my regular domain user and everything will keep on ticking along . However, given that this is a test environment, and I am trying to test stuff just like this on purpose, how can I go about getting the permissions set back on this image without re-importing the VM as my user (the administrator) cant see the machine?

Message was edited by: Mr.Flibble - edited for ease of reading

Reply
0 Kudos
5 Replies
Leafy911
Expert
Expert

You could revert back to your last back up of your database just before you made this change (assuming you have been backing it up since it's only test system)

Regards

Leafy911

(Dont forget you recieve points when you award points)

Regards Leafy911 (Dont forget you recieve points when you award points)
Mr_Flibble1
Enthusiast
Enthusiast

Unfortunately, I have not been backing it up because it is, as you mentioned a test system. It does intrigue me though, that I could go into the VI database then and actually add the permissions back in that way.

Reply
0 Kudos
Leafy911
Expert
Expert

Go for it and let us know if it's possible :smileymischief:

Regards

Leafy911

(Dont forget you recieve points when you award points)

Regards Leafy911 (Dont forget you recieve points when you award points)
Reply
0 Kudos
mike_laspina
Champion
Champion

Provided you have not modified the default local account perms in VC you should be able to login as the local administrator and re-instate the Domain Admins Group as an administrator of the Datacenter.

However may I suggest that you create a new domain group for this purpose. Say VMware-Admins

http://blog.laspina.ca/ vExpert 2009
Reply
0 Kudos
weinstein5
Immortal
Immortal

Mike hit it on the head - if you did not delete the local administrator permissions you should be able to login -

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful
Reply
0 Kudos