The roles created on an ESX/ESXi host are separate from the roles created on a vCenter Server system. When
you manage a host using vCenter Server, only the roles created through vCenter Server are available. If you
connect directly to the host using the vSphere Client, only the roles created directly on the host are available.
vCenter Server and ESX/ESXi hosts provide default roles:
System roles
System roles are permanent. You cannot edit the privileges associated with
these roles.
Sample roles
VMware provides sample roles for convenience as guidelines and suggestions.
You can modify or remove these roles.
You can also create completely new roles.
All roles permit the user to schedule tasks by default. Users can schedule only tasks they have permission to
perform at the time the tasks are created.
N
OTE
Changes to permissions and roles take effect immediately, even if the users involved are logged in,
except for searches, where permissions changes take effect after the user has logged out and logged back in
again.
Default Roles for ESX/ESXi and vCenter Server
vCenter Server, ESX, and ESXi provide default roles. These roles group together privileges for common areas
of responsibility in a vSphere environment.
You can use the default roles to assign permissions in your environment, or use them as a model to develop
your own roles.
Table 18-1
lists the default roles for ESX/ESXi and vCenter Server.
Table 18-1.
Default Roles
Role
Role Type
Description of User Capabilities
No Access
system
Cannot view or change the assigned object.
vSphere Client tabs associated with an object appear without content.
This role can be used to revoke permissions that would otherwise be
propagated to an object from a parent object.
This role is available in ESX/ESXi and vCenter Server.
Read Only
system
View the state and details about the object.
View all the tab panels in the vSphere Client except the Console tab.
Cannot perform any actions through the menus and toolbars.
This role is available on ESX/ESXi and vCenter Server.
Administrator
system
All privileges for all objects.
Add, remove, and set access rights and privileges for all the vCenter
Server users and all the virtual objects in the vSphere environment.
This role is available in ESX/ESXi and vCenter Server.
Virtual Machine Power
User
sample
A set of privileges to allow the user to interact with and make hardware
changes to virtual machines, as well as perform snapshot operations.
Privileges granted include:
n
All privileges for the scheduled task privileges group.
n
Selected privileges for global items, datastore, and virtual machine
privileges groups.
n
No privileges for folder, datacenter, network, host, resource, alarms,
sessions, performance, and permissions privileges groups.
Usually granted on a folder that contains virtual machines or on
individual virtual machines.
This role is available only on vCenter Server.
vSphere Basic System Administration
212
VMware, Inc.
Summary of Contents for 4817V62 - vSphere - PC
Page 13: ...Getting Started VMware Inc 13...
Page 14: ...vSphere Basic System Administration 14 VMware Inc...
Page 24: ...vSphere Basic System Administration 24 VMware Inc...
Page 38: ...vSphere Basic System Administration 38 VMware Inc...
Page 76: ...vSphere Basic System Administration 76 VMware Inc...
Page 85: ...Virtual Machine Management VMware Inc 85...
Page 86: ...vSphere Basic System Administration 86 VMware Inc...
Page 98: ...vSphere Basic System Administration 98 VMware Inc...
Page 131: ...3 Click OK Chapter 11 Creating Virtual Machines VMware Inc 131...
Page 132: ...vSphere Basic System Administration 132 VMware Inc...
Page 140: ...vSphere Basic System Administration 140 VMware Inc...
Page 172: ...vSphere Basic System Administration 172 VMware Inc...
Page 182: ...vSphere Basic System Administration 182 VMware Inc...
Page 200: ...vSphere Basic System Administration 200 VMware Inc...
Page 207: ...System Administration VMware Inc 207...
Page 208: ...vSphere Basic System Administration 208 VMware Inc...
Page 278: ...vSphere Basic System Administration 278 VMware Inc...
Page 289: ...Appendixes VMware Inc 289...
Page 290: ...vSphere Basic System Administration 290 VMware Inc...
Page 324: ...vSphere Basic System Administration 324 VMware Inc...
Page 364: ...vSphere Basic System Administration 364 VMware Inc...