Link to home
Start Free TrialLog in
Avatar of Albert Widjaja
Albert WidjajaFlag for Australia

asked on

Granting AD security group some custom VM role in VCenter server ?

Hi All,

I have VCSA v6.0U2 that is currently working great in my production environment.

I have defined my IT Support team as Administrators group in Vcenter with no issue since they need to work on with VCenter at any level.

But how do I define the below custom permission:

1. Turn on, Turn off, reboot VM
2. View performance of VM
3. Increase / decrease vCPU and vRAM only
4. vMotion VM to another ESXi server within cluster
5. Prohibit expansing or adding new HDD. Anything with VMFS datastore is prohibited.

Because when I add the Developer team AD group to the VM User group role, they cannot do #2,3 and 4

Thanks in advance.
SOLUTION
Avatar of Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Albert Widjaja

ASKER

Ok, where can I find the role ?
Avatar of VH
VH

you need to log into vCenter with the Administrator@vsphere.local if your vCenter user account doesn't have Administration rights

Inside Administration --> Access Control  you can Add new custom roles and Global Permissions.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks Andrew !