Solved

Create Hyper-V VMM power user role

Posted on 2014-10-16
9
228 Views
Last Modified: 2014-11-12
When using VMM and browsing Settings -> Security -> User Roles, and then create a user role, I am only able to choose four different profiles:
The profiles available for mye new VMM role
What is the point of creating a role if the profiles avaible for it are that limitied? I wouldn't actually be customizing a role, but just copying profiles settings. Seems like there is no profile for a power user, so is there a way to create one that has many rights but not full administrative rights?
0
Comment
Question by:itnifl
  • 4
  • 4
9 Comments
 
LVL 79

Expert Comment

by:David Johnson, CD, MVP
ID: 40383859
you do realize that you can create your own user security profiles..
0
 
LVL 2

Author Comment

by:itnifl
ID: 40383973
What is that supposed to mean? I have looked around, but found no documentation describing this.
0
 
LVL 14

Expert Comment

by:Shabarinath Ramadasan
ID: 40389928
hi itnifl,

These are the pre-defined set of roles which you can use for delegating the access. The role is getting linked to Servers/Server Group , Private Cloud, VMM Library resources etc. By defining multiple roles, You could have different set of resources delegated for each group.

It might be still unclear. Please let me know if you need more details on this.

Thanks,
Shaba
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 2

Author Comment

by:itnifl
ID: 40390110
Thank you Shaba, but where do I define these roles
0
 
LVL 14

Expert Comment

by:Shabarinath Ramadasan
ID: 40391457
These roles are pre-defined.

http://technet.microsoft.com/en-us/library/gg696971.aspx

As far as I know, there is no way to customize the roles or create a role with customized.

But I hope that we could get RBAC based roles like what we have in exchange in future.
0
 
LVL 2

Author Comment

by:itnifl
ID: 40393712
David Johnson seems to say that it is possible to create custom security profiles. I think it is unbearable that Microsoft creates this all or nothing practice without possibility for granulation, if that is true. I need custom profiles for the new roles.
0
 
LVL 14

Accepted Solution

by:
Shabarinath Ramadasan earned 500 total points
ID: 40393742
Capture.PNGI am not aware of a custom role. What you can customize is with in the subset of activities delegated on based on the user role, you can enable/disable some.

Eg - Not to allow removal of virtual machine

I know its a pain of not having the granular delegation, but I have a strong confidence that we will see this feature in the upcoming version.
0
 
LVL 2

Author Comment

by:itnifl
ID: 40393752
Your menu looks different from mine. What path in VMM did you select to get this menu? I had no options in my menu for Permissions. I browsed Settings -> Security -> User Roles, and then selected the button to create a new role.
0
 
LVL 14

Expert Comment

by:Shabarinath Ramadasan
ID: 40393769
You are on the right path. While creating a user role, we need to select a user role profile. I created a user role by selecting "tenant Administrator" profile. After creating, go to the properties of the user role and you could see Permissions tab as mentioned on the screen shot. The options you see here depends on what profile you choose while creating the user role.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OfficeMate Freezes on login or does not load after login credentials are input.
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question