Permission role to limit changing network label

[steveb05]

I'm shocked that I've not been able to find any information on this...I can't believe I'm alone in what I wish to do.

I would like to delegate the ability for other groups to manage virtual machines in separate folders and resource pools. I have everything I wish to do working with the single exception of restricting the networks they are allowed to use. I have not found a parameter that would allow me to limit the role from changing the network label for a NIC in a VM. I need to be able to restrict them from using our "production" Virtual Machine networks.

Any help would be greatly appreciated.

[Texiwill]

Hello,

This would be Virtual Machine -> Configuration -> Modify Device Settings

However I believe this is an all or nothing setting.

Instead of letting them have access to the VIC why not have the VM administrators use RDP or VNC to access the console. THe VIC has too much power. COmmon issue with this is connected CDROM drives, why bother, use something like VCD to mount an ISO image.

Best regards,

Edward L. Haletky

VMware Communities User Moderator

====

Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.

SearchVMware Blog: http://itknowledgeexchange.techtarget.com/virtualization-pro/

Blue Gears Blogs - http://www.itworld.com/ and http://www.networkworld.com/community/haletky

As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization