Role/Permission question

[awjudge]

Is there anything between an end user and a Tenant Admin?

I would like to cater for team structures. Any member of the team will be able to create a VM, but when any member of the team logs in, they should be able to see all machines that belong to that team.

I don't need or want these users to have the level of access that comes from the Tenant Admin role. Is there any way to do this so that the team members have the same permissions to the team VMs as they do to their own, and no more?

[GrantOrchardVMw · Accepted solution]

That would be the Support User role. They can see all items within the Business Group.

Grant

[awjudge]

Of course! Thanks Grant.

[stvkpln]

One downside I just uncovered about business group managers  and support users is that they can do everything in the context of a blueprint, even if you're explicitly disabled that capability (in my case, it was snapshots). Keep that in mind when enabling higher level roles... vCAC and permissions still has a ways to go.