Albert Widjaja
asked on
Granting AD security group some custom VM role in VCenter server ?
Hi All,
I have VCSA v6.0U2 that is currently working great in my production environment.
I have defined my IT Support team as Administrators group in Vcenter with no issue since they need to work on with VCenter at any level.
But how do I define the below custom permission:
1. Turn on, Turn off, reboot VM
2. View performance of VM
3. Increase / decrease vCPU and vRAM only
4. vMotion VM to another ESXi server within cluster
5. Prohibit expansing or adding new HDD. Anything with VMFS datastore is prohibited.
Because when I add the Developer team AD group to the VM User group role, they cannot do #2,3 and 4
Thanks in advance.
I have VCSA v6.0U2 that is currently working great in my production environment.
I have defined my IT Support team as Administrators group in Vcenter with no issue since they need to work on with VCenter at any level.
But how do I define the below custom permission:
1. Turn on, Turn off, reboot VM
2. View performance of VM
3. Increase / decrease vCPU and vRAM only
4. vMotion VM to another ESXi server within cluster
5. Prohibit expansing or adding new HDD. Anything with VMFS datastore is prohibited.
Because when I add the Developer team AD group to the VM User group role, they cannot do #2,3 and 4
Thanks in advance.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
you need to log into vCenter with the Administrator@vsphere.loca l if your vCenter user account doesn't have Administration rights
Inside Administration --> Access Control you can Add new custom roles and Global Permissions.
Inside Administration --> Access Control you can Add new custom roles and Global Permissions.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks Andrew !
ASKER