User Rights for Platespin

[menjur]

One of our customers want to use platspin to convert there machines to ESX 3,5.

Now we don't want them to give to much rights in VC so they can mass up HA,DRS or the hosts.

what are the minimal rights a user need to have to work properly with Platspin?

These rights seems to enough to me?

Virtual Machine - inventory - ALL

Virtual Machine - Interaction - power on, power off, reset, device connection, configure CD media, configure floppy media and tools instal

Virtual machine - configuration - rename, add new disk, add exiting disk, remove disk, change cpu count, change memory, add or remove device, modify device settings,setting, change resources and upgrade virtual hardware.

Do i miss something.

Regards,

Menjur

[menjur]

Has nobody any idea??

[M__Y_]

Hi,

I am sorry to inform you that I have not the answer but I know that Platespin PowerConvert needs lot of rights on the VC. I remember that it needs Datastore/Browse, Datastore/Remove file, Datastore/File Management, lots of rights in Virtual Machine (including Delete) and (may be) Global/Cancel Task.

In our case, we have created a local account on the ESX server with SSH access and application administrator rights.

# The MD5 encrypted string below is for
"password"
useradd -g wheel -m -d /home/platespin -p
'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -c "Platespin Service"
platespin
chmod 750 /home/platespin
touch /home/platespin/.profile
chmod 740 /home/platespin/.profile
chown platespin:wheel /home/platespin/.profile

Regards.

[menjur]

Hi M.Y.

thanks for the reply.

Giving a dedicated ESX server is indeed a good option and maybe the only one to get some security