Another analyst at my company gave USERS permission to all datacenter on vSphere 4. He used the READ-ONLY role to this group.
I am the administrator of entire Vmware enviroment and I can not do nothing, even open the console of a VM. I think I am on both groups (ADMINISTRATORS and USERS) but I can´t change this.
I´m using the root credentials on each host ESX to do my job.
How can I change or remove the permission of USERS ? Directly on database (SQL Express) ? How ?
Help me !
If your account is member of 2 groups. The Least permissions will win.
In this case you got the least priv "READ only" and not administrator.
Tell Analyst to remove you from USERS group
Hope this helps
Check this out:
http://hagshur.spaces.live.com/Blog/cns!2471EDB5C3481D6A!324.entry
The first option did not work for me. I had to:
open the VC SQL database and open the table : VPX_ACCESS, then add another row :
ID: 1
Principal : Administrators
Role_ID : -1
ENTITY_ID : 1
FLAG : 3
Restart the VC service (I had to actually reboot the server to get it to work again) and then I was able to get sign on to VC again.
Hope this helps.
Bob