VMware Cloud Community
BairdVMAdmin
Contributor
Contributor

Create ESXi role with ONLY SSH access

I'm relying on SSH as part of a rolling restart script. Currently it works fine using the "Admin" role but that's not an acceptable long term solution so I need help determining what Privilege(s) are required to allow SSH

Any help would be greatly appreciated. 

 

Reply
0 Kudos
1 Reply
Vikramaditya_J
Enthusiast
Enthusiast

If "Admin" isn't desirable, then you can assign any other pre-defined role to the user e.g. vpxuser or dcui. For details, refer: https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-2215AADC-D4CD-49D...

To check existing users and their permissions:-

# esxcli system account list

# esxcli system permission list

To modify permission for any existing user:

# esxcli system permission set -id <username> -r <role>

E.g. # esxcli system permission set -id jack -r dcui

 

 

Thank you!
Vikramaditya J
Reply
0 Kudos