vCenter

 View Only
Expand all | Collapse all
  • 1.  vCenter 7

    Posted Feb 24, 2023 07:07 AM

    I have connect my vCenter with the Active Directory of my Company.

    For example i put some AD Users in in the Adminstrator Permission Roll same where the Local Administrator is but the AD User do not have the same Rights.



  • 2.  RE: vCenter 7

    Broadcom Employee
    Posted Feb 24, 2023 08:19 AM

    Did you apply global permissions also for AD user/group?



  • 3.  RE: vCenter 7

    Posted Feb 24, 2023 08:31 AM

    Yes i used the global Permissoin. And also propagate to child objects.



  • 4.  RE: vCenter 7

    Broadcom Employee
    Posted Feb 24, 2023 05:18 PM

    Can you tell me what rights AD user is missing compared to administrator account.



  • 5.  RE: vCenter 7

    Posted Feb 27, 2023 10:00 AM

    Vor Example:
    When i got to Administration - Users and Groups i got the Message "You have no privileges to view this object."

    But iam in the "Administrator" Roll.

    Iam also not able to Upload a VM because i got the error, that i do not have permission to the datastore.



  • 6.  RE: vCenter 7

    Broadcom Employee
    Posted Feb 28, 2023 04:32 PM

    can you share the screenshot of permissions for datastore and mention the user you are having issue with ? also screenshot of global permissions? 



  • 7.  RE: vCenter 7

    Posted Mar 01, 2023 05:42 AM

    vcs_1.pngvcs_2.pngvcs_3.png

     

    So actually i should have the same Right like the local Administator.
    With the local Administator i can also upload VMs so have permission the the datastore.

     



  • 8.  RE: vCenter 7

    Broadcom Employee
    Posted Mar 01, 2023 08:37 AM

    Please add your AD group to the vCenter SSO Group. Below article may help you. You need to login as administrator@vsphere.local to make this changes. 

    https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.authentication.doc/GUID-CDEA6F32-7581-4615-8572-E0B44C11D80D.html

     



  • 9.  RE: vCenter 7

    Posted Mar 01, 2023 09:22 AM

    die which SSO Group?
    Do you mean the Group "Administrators" oder more Groups?



  • 10.  RE: vCenter 7

    Broadcom Employee
    Posted Mar 01, 2023 09:32 AM

    under SSO you will find a group called Administrator. In that group, please add your AD user/Group. 



  • 11.  RE: vCenter 7

    Posted Mar 01, 2023 09:36 AM

    Admin Groups.JPG

    There are many Admin groups.



  • 12.  RE: vCenter 7
    Best Answer

    Broadcom Employee
    Posted Mar 01, 2023 01:16 PM

    use group named Administrators.



  • 13.  RE: vCenter 7

    Posted Feb 24, 2023 09:57 AM

    Hi,

    Try with the group.

    Create a group in AD, add some users there and then add this group to vCenter with Administrator permissions to child objects.

    Login to vCenter with a user from that group and verify the permissions.