Not sure if this is the right group, but I need to ask a question about roles. Is it possible to setup a role that allows a user to create a vm and to vmotion a vm to another host, but not to storage vmotion a vm?
From what I've seen, it appears the Resource.Migrate privilege determines whether a user can perform a vmotion, but it also appears to me that this applies to both a host and datastore migration.
Thanks for your help...
According to http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=101134... Resource > Relocate is also required for Storage vMotion.