VMware VS4-ENT-PL-A - vSphere Enterprise Plus, Setup Manual, Page: 90 / 276

Procedure
1 Browse to the object in the vSphere Web Client object navigator.
2 Click the Manage tab and select Permissions.
3 Click Add Permission.
4 Click Add.
5 Identify the user or group to assign to this role.
a
Select the domain where the user or group is located from the Domain drop-down menu.
b Type a name in the Search box or select a name from the list.
The system searches user names, group names, and descriptions.
c Select the user and click Add.
The name is added to either the Users or Groups list.
d (Optional) Click Check Names to verify that the user or group exists in the database.
e Click OK.
6 Select a role from the Assigned Role drop-down menu.
The roles that are assigned to the object appear in the menu. The privileges contained in the role are
listed in the section below the role title.
7 (Optional) Deselect the Propagate to Child Objects check box.
The role is applied only to the selected object and does not propagate to the child objects.
8 Verify that the users and groups are assigned to the appropriate permissions and click OK.
The server adds the permission to the list of permissions for the object.
The list of permissions references all users and groups that have roles assigned to the object and
indicates where in the vCenter Server hierarchy the role is assigned.
Hierarchical Inheritance of Permissions
When you assign a permission to an object, you can choose whether the permission propagates down the
object hierarchy. You set propagation for each permission. Propagation is not universally applied.
Permissions defined for a child object always override the permissions that are propagated from parent
objects.
The figure illustrates inventory hierarchy and the paths by which permissions can propagate.
vSphere Installation and Setup
90 VMware, Inc.