As a vCenter Server administrator, you can create a custom vCenter Server role and assign privileges to it.

A service account is used by the App Volumes Manager to communicate with vCenter Server. The default administrator role can be used for this service account, but you can create a vCenter Server role with certain privileges, specifically for the App Volumes service account.

You can also use PowerCLI to create a custom role. See Create a Custom vCenter Server Role Using PowerCLI.

Procedure

  1. Manually create a new vCenter Server role.
  2. Assign privileges to the role.

    Object

    Permission

    Datastore

    • Allocate space

    • Browse datastore

    • Low-level file operations

    • Remove file

    • Update virtual machine files

    Folder

    • Create folder

    • Delete folder

    Global

    Cancel task

    Host

    • Create virtual machine

    • Delete virtual machine

    • Reconfigure virtual machine

    Resource

    Assign virtual machine to resource pool

    Sessions

    View and stop sessions

    Tasks

    Create task

    Virtual machine > Configuration

    • Add existing disk

    • Add new disk

    • Add or remove device

    • Change resource

    • Remove disk

    • Settings

    Interaction

    • Power Off

    • Power On

    • Suspend

    Inventory

    • Create from existing

    • Create new

    • Move

    • Register

    • Remove

    • Unregister

    Provisioning

    • Clone template

    • Clone virtual machine

    • Create template from virtual machine

    • Customize

    • Deploy template

    • Mark as template

    • Mark as virtual machine

    • Modify customization specifications

    • Promote disks

    • Read customization specifications