Restrict a single port group from being added to VMs with role

[CiDirkona]

Hello!

We have two Vmware 5.1 (soon to be 5.5) ESXi clusters with 10 hosts total. We're setting up some new VMs for the finance department where they want to ensure that level-1 tech support can't access them. From the VM side, it's pretty easy -- but we want to make sure that a regular technician also can't put a VM on the portgroup (and thus VLAN) that these machines will also be on.

Is there a way to restrict a single portgroup from being assigned to any VM via roles?

Thanks in advance!

[abhilashhb · Accepted solution]

Its quiet easy. Go to vCenter.-->Home--->Networking.

Select the Portgroup where you want to restrict the users. Go to Permissions Tab, Right-click and add permissions.

Add all the users and groups who should not access this and give role as No access. They will never know it exists

[CiDirkona]

Perfect, thank you!

[abhilashhb]

Glad it helped.

If you found the answer helpful, consider awarding points by selecting correct and helpful answers.