What is the easiest way to setup a user access to just 1 vmhost?

I need to setup an account for a user that needs to have access to just 1 host in a virtual cluster not all of the host, and is wondering if this is possible to do?
Meaning just setup an account on the one host but not having access to the others..
LVL 1
vmichAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
What features does he need to access, create a custom role, and add the functions, the user needs access to.

does the user need host access or VM Access ?
vmichAuthor Commented:
well they need to just be able to add vms to this one host and make any config changes to the vms but not any changes to the host itself..
vmichAuthor Commented:
so they account needs to let them login into the one host direct
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Not really, if you have a Cluster, you have vCenter Server, and direct access to the host should not be available, create a user, with a Custom Role, in vCenter Server.

Why do you only want them to create VMs on one host, is it not best to let them create VMs for the Cluster so they will be highly available (HA), and have access to DRS, otherwise one host will be "loaded!"
vmichAuthor Commented:
well because a software company needs to have access to just one host to create new windows 7 vms whenever a new airline comes in..
We don't want them to have the ability to make any changes to any of the vm host settings. So that is why I was trying to create an account that they could login into the host direct and then have the ability to add these vms when needed..
Does this make sense?
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
why I was trying to create an account that they could login into the host direct and then have the ability to add these vms when needed..
Does this make sense?

You will find it difficult, creating an account, that just can create VMs, without full management of the host, anyway terrible idea.

No it does not make sense. If you have vCenter Server managing VMs, you should create and manage VMs through vCenter Server.

VMs and Hosts are different.

You can create a user, which can just create VMs.
vmichAuthor Commented:
Oh ok that make sense..
So I would have to create a user and then add permissions but just to create vms?
vmichAuthor Commented:
So what steps would I need to follow to setup this users access in virtual center 6 to be able to just setup vms?
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Create a new role. (with the access you require).

Add the user from Active Directory, to vCenter Server folder.

see here

https://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc_50%2FGUID-5ACE7CFA-75EC-4EF3-95E7-19962D76225E.html
vmichAuthor Commented:
Here is the document that I followed and it let me setup the access in the vctr for just letting them have the access to setup new vms and nothing more...
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1027743

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
vmichAuthor Commented:
cloned a role and added rights
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.