anyone could help me, I have assigned role Administrator to sub folder with two virtual machines, but after logged as this user I still even see datastores for these virtual machines. Is the only way to assign a user global administrator to edit datastores?