To create a role,
in the Administration area on the vCenter client home page click on the ROLEs icon
either click "Add Role" or right click anywhere under Roles (where it says NO ACCESS, READ ONLY etc)
Enter the name you wish,
and decide if it will be Read only or Read Write
Once this is done you need to add a User ID or Group to the Role
From the Host screen, Select "Hosts and Clusters and then select the vCenter server element and select the permissions tab.
Right Click and select "Add Permissions" from this wizard you can select the domain user or group that has rights to your newly created role
Tom Howarth VCP / VCAP / vExpert
VMware Communities User Moderator
Blog: http://www.planetvm.net
Contributing author on VMware vSphere and Virtual Infrastructure Security: Securing ESX and the Virtual Environment
Contributing author on VCP VMware Certified Professional on VSphere 4 Study Guide: Exam VCP-410
