-
1. Re: Unable to view VM due to permissions
Have you setup AD integration and configured domain accounts with admin permissions? Then you are able to login with that and change the permissions for that particular VM. Or is administrator@vsphere.local the only account to be able to change permissions? If so, I guess you are out of luck.
-
2. Re: Unable to view VM due to permissions
Yes, AD has been integrated in my vCenter and we did setup a group with admin permissions.
But the admin permissions are not set on this particular VM. Do I add another AD account with administrator permissions and set that globally? Will those permission propagate to the VM?
-
3. Re: Unable to view VM due to permissions
What about logging in with an account from that group with admin permissions. And then set/change on that particular vm the permissions back for administrator@vsphere.local.
-
4. Re: Unable to view VM due to permissions
Appears my admin gave the " no access" on the VM for the admin group as well. So basically the admin group and administrator@vsphere.local have no access permissions on this 1 VM. Shouldn't newly created accounts or groups that have administrator privileges on the host with the "propagate to children" propagate onto the VM in question?
Thanks,
-
5. Re: Unable to view VM due to permissions
If you create a user or group permission on a parent object (for example a host, cluster or vCenter), you have the possibility to activate the option "Propagate to children". So these permissions automatically apply to all dependent child objects (clusters, hosts or VMs).
But permissions on a child object can always override the permissions of a parent object. For example, group A has the role "Administrators" on the cluster level (and is propagated to all children) and you set the permissions on a particular VM to "read-only" for this group A. So, group A only has read-only rights on this VM. But if you remove this permission on the VM, the users of group A have administrative permissions again on this VM.
-
6. Re: Unable to view VM due to permissions
sk84, i gave a new user administrator access on the cluster, and the permissions did not propagate to the VM in question.
Any other ideas?
-
7. Re: Unable to view VM due to permissions
I was able to correct the issue by creating a new @vsphere.local account on the cluster and propagating the permissions down to the VMs. Thanks for your help gentlemen.
-