Provisioning Resources › VMware vCenter Provisioning › VMware vCenter and vSphere User Permissions

VMware vCenter and vSphere User Permissions

All VMware vCenter operations that CA Server Automation supports require that you configure user permissions in the VMware product. The minimum requirements are described here. Some users may require additional permissions depending on their role. These permissions apply to VMware vCenter versions 2.5, 4.0, and 4.1.

Permissions are set in the Edit Role dialog under All Privileges, Virtual Machine.

Users are located on the Administration, Configuration, Provisioning: vCenter Server page. After configuring permissions, perform the following actions to ensure that VM provisioning does not fail:

• Add the users to the hosts and clusters level in VMware. See http://kb.vmware.com/kb/1008192 for details.

Note: For more information about setting permissions, see the VMware documentation.

Power Operation

To let users perform power operations (Adjust VC Power Action), select the following options under Interaction:

• Power on
• Power off
• Suspend
• Reset

Resource Adjustment

Resource adjustment permissions let users perform the following operations:

• Set CPU Limit
• Set CPU Reservation
• Set Memory Limit
• Set Memory Reservation

To configure resource adjustment permissions, select Change Resource under Configuration.

Share Adjustment

Share adjustment permissions let users perform the following operations:

• Set Memory
• Add Memory
• Subtract Memory
• Set CPU
• Add CPU
• Subtract CPU

To configure share adjustment permissions, select the following settings under Configuration:

• Change CPU Count
• Memory
• Settings

Delete VM

Delete VM permissions let users delete virtual machines (Delete VC Virtual Machine).

To configure delete VM permissions, select Remove under Inventory.

VM and Template Conversion

VM and template conversion permissions let users convert templates to VMs and VMs to templates.

To configure VM and template conversion permissions, select the following settings:

under Provisioning

• Mark As Template
• Mark as Virtual Machine

under Resource

• Assign Virtual Machine to Resource Pool

Cloning

Cloning permissions let users perform cloning operations including VM to template cloning or from VM to VM.

To configure vCenter cloning permissions, select the following settings:

under Inventory

• Create
• Remove
• Move

under Interaction

• Power On
• Power Off
• Suspend
• Reset
• Device connection
• Tools Install

under Configuration

• Add Existing Disk
• Add New Disk
• Change CPU Count
• Memory
• Modify Device Settings
• Settings
• Change Resource

under Provisioning

• Customize
• Clone
• Deploy Template
• Mark as Template
• Mark as Virtual Machine
• Read Customization Specifications
• Modify Customization Specification

under Resource

Assign Virtual Machine to Resource Pool

VMotion

VMotion permissions let users migrate VMs from one physical server to another.

To configure VMotion permissions, select the following settings under Resource:

• Migrate
• Relocate
• Query VMotion

VM Snapshot

VM snapshot permissions let users take snapshots.

To configure VM snapshot permissions, select the following settings under State:

• Create Snapshot
• Revert To Snapshot
• Remove Snapshot
• Rename Snapshot