User permissions to export events

[smithjr]

Hi all, what are the necessary vcenter permissiones for a user to export vcenter events?. 

Im running this script:

Connect-VIServer xxxxxxxx -User xxxxxxx -Password xxxxxxxxxx

$prevDay = (Get-Date -Hour 0 -Minute 0 -Second 0).AddDays(-1)

$filename = "C:\log5" + $prevDay.ToString("MMddyyy") + ".csv"

Get-VIEvent -Start $prevDay -Finish $prevDay.AddDays(1) -MaxSamples ([int]::MaxValue) |

Select @{N="Description";E={$_.FullFormattedMessage}},

  @{N="Date Time";E={$_.CreatedTime}},

  @{N="Target";E={$_.Entity.Name}},

  @{N="User";E={$_.UserName}} |

Export-Csv $filename -NoTypeInformation -UseCulture

Thanks!

[mattboren]

Hello, smithjr-

Per the API reference for EventHistoryCollector (which is what Get-VIEvent uses, per an Onyx trace), the methods used require the privileges of "none".  So, if the account as which you are running the script can successfully Connect-VIServer, it should be good to get VI events.

Btw, the methods used are SetCollectorPageSize(), ResetCollector(), ReadPreviousEvents(), and DestroyCollector().

[smithjr]

"none" its a vcenter permission????

[mattboren · Accepted solution]

Hello-

I do not think that you assign a permission named, "none".  From the API reference listed above, I take that to mean that there are no additional privileges/permissions required for querying events.

Add'l info (added to this response at 11:10pm):  I tested with a VIAccount that had the Read-Only role assigned, and it was able retrieve events.  So, it would seem that so long as the account can connect to the vCenter/host, that it can retrieve events with no additional privileges required.  Are you seeing different behavior?

[smithjr]

Thanks a lot, read-only is the answer.