I think this may be a bug -- I just wanted to confirm.
We have a group of users that have limited access to VMs, and one of the privileges they have is "Alarm > Disable Alarm Actions"
When using the Flash Web Client (VCSA 6.5), they can right click on a VM and select "Alarms > Disable Alarm Actions" and it works fine and they can choose that option. They can then Enable Alarm Actions if they've disabled it. The New Alarm Definition is always greyed out as they don't have that permission.
Now that we've switched them to use the HTML5 client, this is what they now see. Notice that not only the "Disable Alarm Action" is greyed out, they now have permissions to "Create a New Alarm"
The users' privilege has not changed, only the switch between Flash to HTML5. They don't have access to "Create Alarm" but on the HTML5 client, they do.