Able to login to vSphere Web Client with account that has no access

[abugeja]

Hi,

In our environment we have two user accounts. Normal user account for day to day (email, web browsing etc) and another to access servers, vCenters etc.

When we login to the vsphere webclient using our normal user account to my amazement it logs in but thankfully no information is available. Why is a domain account that has no access to the vCenter environment able to login to the webclient?

If I do the same on the fat client it says I cant login because I don't have permission. I would of thought the same to the webclient but obviously not. What am I missing?

[rcporto]

Your normal account can login on the vSphere Web Client because you may not limit the Base DN for the users/group in your Active Directory identity source. Note that even with the normal user able to login on the vSphere Web Client, that user will not have access to vCenter server until you give the approppriate permission.