Customize permissions access to a specific VM

[padulka]

Hi two all,

I need to assigne a AD user to add and manage disk of a specific Virtual Machine but I try a lot of assignement and only which works is to assign ad level Datacenter Object.

I also try to use the default 'Virtual machine power user (sample)' without success.

Have anyone idea to find a solution?

Regards

[scott28tt]

Where is the VM in your inventory hierarchy? Can you put it in it’s own folder in the hierarchy?

[padulka]

I have a custom folder folder for this machine but if I try to assign my custom role, with permissions in attach, I receive the error no permission when I try to add a new disk to this machine.

If assign this role at Datacenter object I can add disk without problem

[nachogonzalez · Accepted solution]

Did you assign permissions to the custom role on the datastore?
That might be the solution

Since when you assign the permission to the Datacenter all the permissions will be inherited by child objects.

[padulka]

No I'm giving permission to the cluster where's the VMs....I will try to give it on the datastore objects but I think it's a strange configuration because, not in my case, if there's a cluster storage I need to configure to all datastore the same permission.

Thanks

[nachogonzalez]

If there is a storage cluster you need to give the permission on the cluster, not on each Datastore.

[padulka]

Yes correct, I never thought of that.

I'm trying to configure on the storage object

[padulka]

thanks @nachogonzalez,

I need to set the permissions on the cluster object and also on datastore objects.