Access Right to change a particular VM's VLAN Network Connection ?

[TonyJK]

Hi,

We are using ESXi 6 Update 2a with vCenter Server AD Integration.

There are 3 sites in our environment.  And we have 3 Network Connections as well (Different VLAN).

I have tried the following to grant access right to my colleague so that he can change Network Connection for 2 particular VMs in one of our site but not sucessful.

1) Administrator of VMs

2) Administrator of Cluster that contains both VMs

Finally, I assign him to the "vCenter Admin" Group in AD and it is OK.

May I seek your advice what is the proper way to grant him access to change those 2 VM's settings without granting him full access right ?

Thanks

[JimKnopf99 · Accepted solution]

Hi,

until now, i only found a way to do it on datacenter level.

• Network > Assign Network
• Virtual Machine > Configuration > Modify device settings
• Virtual Machine > Configuration > Settings
• 
  

If you create a role and add those permissions to your datacenter, then the members of that role could change vlan settings.

But if you only grant those permissons on vm level, you are not able to change the vlan settings.

I will try to find a better solution next week

Frank

[TonyJK]

Dear Jim,

Thanks for your finding and advice.

It is already much better than granting Administrative Right to whole Environment.

Thanks