Tried modifying LucD's code but to no avail:
$report = @()
$inherited = $true
$authMgr = Get-View AuthorizationManager
$roles = @{}
foreach($role in $authMgr.RoleList){
$roles[http://$role.RoleId|http://$role.RoleId] = $role.Name
}
Get-DataCenter -Name "DC_name" {
$exist = Get-VIObjectByVIView -MORef $_.MoRef -ErrorAction SilentlyContinue
if($exist -ne $null){
$current = Get-View $_.Parent
$path = $_.Name
do {
$parent = $current
if($parent.Name -ne "vm"){$path = $parent.Name + "\" + $path}
$current = Get-View $current.Parent
} while ($current.Parent -ne $null)
$permissions = $authMgr.RetrieveEntityPermissions($_.MoRef, $inherited)
if($permissions.Length -ne 0){
foreach($perm in $permissions){
$row = "" | select Name, Path, Principal, Group, Role, DefinedIn
$row.Name = $_.Name
$row.Path = $path
$row.Principal = $perm.Principal
$row.Group = $perm.Group
$row.Role = $roles[http://$perm.RoleId|http://$perm.RoleId]
$row.DefinedIn = (Get-View -Id $perm.Entity).Name
$report += $row
}
}
else{
$row = "" | select Name, Path, Princiapl, Group
$row.Name = $_.Name
$row.Path = $path
$report += $row
}
}
}
