[vRA 7.4] how to block VM network modification in the reconfigure action for users?

[eric_krejci]

Hello,

I have a concerne about the reconfiguration action for our end users. in the network part of the VM reconfiguration they can modify the network of their VMs. this is a strong issue from a security standpoint. do you know how this can be blocked?

I know that I can limit the number of NIC in the blueprint but How can I denied them to modify the network. (network.profilename)

thank you in advance for your help.

sincerely

Eric

[daphnissov]

I think you may have to write a custom day2 action for that. I believe by default you can't restrict users to certain networks if the reservation allows it.

[eric_krejci]

I was afraid of that.

so I will have to do a day2 for CPU, RAM and Storage modification to be certain the users won't be able to change their network assignent.

I think that I will fill a RFE for that one.

thank you for your answer so far. if anyone else as a tips. don't hesitate.

Eric