asked on

Create VSphere Role for engineer to access only 3 x Server VMs only to carry out a software upgrade

I have an engineer coming to upgrade software on 3 servers overnight. He will need access to only 3 x Server VM's.

Is there a way to give him access via the VShpere Web Client so he only has admin access on those 3 x server and can't see any other machines.

I can create him a temp user in AD.

I can just give him Remote Desktop Access but just in case he may need to access via VSphere.

Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)

Yes, create an account for the Engineer, and assign Permissions ONLY to those VMs using vCenter Server.

or move all those VMs into a Folder, and then assign permissions to that folder only, when the Engineer logs in, he will only see those VMs.

of if there are Windows you could use RDP, Teamviewer, Log me in... etc

Why does he need access to the console ? (vSphere client)

rookeydooks

ASKER

Thanks Andrew. I'm not sure he will need console access, just want to be prepared just in case it comes up.

I've created the temp user but cant see how to only add permissions to specific VM's. I'm in the Change Role on Permissions window and there's 2 columns. The left is Users and Groups where i have added the temp user. The right column is Assigned Role. Not sure where to go from here ?

Not moved VMs into a Folder before but will do some research.

ASKER CERTIFIED SOLUTION

Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

rookeydooks

ASKER

Ah.. perfect, thank you.

I was going in to VCentre, Permissions and adding a user then where they get access to everything.

Home/Virtual Machines/

right click the VM you want to give access to and select

AllvCentre Actions/Permissions

and you can give permisions to specific machine.

Many thanks Andrew.