Is it possible to create a role in vcenter, which has the ability to grant console access permission on vm's ?

[shaavina]

Is it possible to create a role in vCenter, which has the ability to grant console access permission on vm's ? i.e. the user which is assigned this role should be able to grant console access to any vm in a folder.

vCenter version - 6.5

[scott28tt · Accepted solution]

I don't think vSphere has that level of granularity.

I think I'm right in saying that you can define that someone can assign permissions to an object, or a group of objects, but not define what those permissions will actually be.

So you can define that a user has the ability to assign permissions on a folder of VMs, but not define they can only assign the remote console permission.

Reference: Defined Privileges

[asajm]

Hi shaavina​

Administration >>> Global Permissions >>> add user and assgin the role below

[scott28tt]

That's how you assign a user to access the console, rather than how you assign one user the ability to assign other users that role (which is any interpretation of the question being asked)

[shaavina]

Thanks, looks like not possible. I also had a ticket with VMware on this, the engineer assigned to the ticket also had no clue if such granular permission assignment on a role was possible or not.