User permissions on VM

[BasJ]

Hi,

i have recently setup a ESXi server with a couple of hosts. I want to give someone acces to start/stop his server. This i can do by making a role and adding the proper permissions. This works as designed, but i want more

I want the user to choose a file from the datastore, so i added the permission browse datastore. But the user is unable to browse the datastore? Also I want to user to give him rights to make a virtual appliance from his machine through vmware converter. But he can't see any of his machines where he has got permissions to.

Where can i find a listing to select the proper permissions to a user? I can't and won't give him complete admin rights. I have attached a screenshot to let you see wich rights i have enabled.

[nick_couchman]

Make sure you're applying the permissions at the proper level. For example, the permissions to browse the datastore must be applied at the host or datacenter level. If you apply these permissions at a resource pool or VM level, they have no effect on what the user can or cannot do. This is a little tricky in ESX(i) - I still haven't figured out how to delegate permissions exactly the way I want to that allows users to create VMs in a certain resource pool but not see other VMs, etc. It's a little tricky...

[BasJ]

Thanks for the suggestion, i understand i need to set certain permissions on the host level, and then on the VM.

But is there some more documentation i can find about this topic? I still can't get it to work that users have full rights on a proper level.

[Dave_Mishchenko]

This might give you a hand - http://www.vmware.com/pdf/vi3_vc_roles.pdf. It's written for VirtualCenter, but most of the permissions are the same for stand alone hosts.