Ok, that's probably the issue. You don't want to add this user to the root group; in fact, whatever default groups are assigned when you create the account is fine. Once the account is created, select the host, go to the Permissions tab, and add a Permission with the Read-Only role for your new user account. This should give it sufficient permissions to access the performance data via vSphere client and PowerCLI.