Akopylov
Commander
Commander

Permissions for vm network modify. vCenter 5.5u3.

Hello there.

I need to give AD user full vm permissions on a single folder and permissions to assign vmnetwork to vm in this folder (I got dvswitch). Well I got problem here:

1. If I set "assign network" property and apply it to VM folder AND to datacenter (cant apply it to dvswitch), then he can change vm networks on all vms in datacenter (not only in particular folder).

2. If I set "assign network" property and apply it to VM folder AND to few dvswitch portgroups, then he can only see vmnetwork lables in vm properties but can not change networks.

The only way I see is to use option 1. and to pick every folder and set "no access" except the folder that he should get permissions. But I guess its not the best way.

0 Kudos
1 Reply
vHaridas
Expert
Expert

Hi,

Create new Role with below permissions -

Virtual Machine --> Configuration --> Modify Device settings

Virtual Machine --> Configuration --> Settings

Network --> Assign Network

Assign this role to Users at specific Folder level and Port Groups in Networks.

Thanks,

vHaridas

Please consider awarding points for "Correct" or "Helpful" replies. Thanks....!!! https://vprhlabs.blogspot.in/
0 Kudos