Under vCenter 3.5 we had configured security roles to allow users to access hosted ISO images on a datastore. At the same time we had prevented them modifying any of the other underlying hardware of a VM (including changing which network the VM resided on) without a problem. Now, in vSphere/vCenter 4.1 I can't find a similar permission to allow mounting an ISO but disallow changing networks.
Anyone have this configured in their environment?
