As a vCenter Server administrator, you can create a custom vCenter Server role and assign privileges to it.

A service account is used by the App Volumes Manager to communicate with vCenter Server. The default administrator role can be used for this service account, but you can create a vCenter Server role with certain privileges, specifically for the App Volumes service account.

You can also use PowerCLI to create a custom role. See Create a Custom vCenter Server Role Using PowerCLI.

Procedure

  1. Manually create a new vCenter Server role.
  2. Assign privileges to the role.
    Object Permission
    Cryptographic Operations Direct Access
    Note: This permission is required only when the virtual machine’s storage has encryption policies.
    Datastore
    • Allocate space
    • Browse datastore
    • Low-level file operations
    • Remove file
    • Update virtual machine files
    Folder
    • Create folder
    • Delete folder
    Global Cancel task
    Host > Local operations
    • Create virtual machine
    • Delete virtual machine
    • Reconfigure virtual machine
    Resource Assign virtual machine to resource pool
    Sessions View and stop sessions
    Tasks Create task
    Virtual machine > Change Configuration
    • Add existing disk
    • Add new disk
    • Add or remove device
    • Advanced configuration
    • Change resource
    • Query unowned files
    • Remove disk
    • Change Settings
    Virtual machine > Edit Inventory
    • Create from existing
    • Create new
    • Move
    • Register
    • Remove
    • Unregister
    Virtual machine > Interaction
    • Power Off
    • Power On
    • Suspend
    Virtual machine > Provisioning
    • Clone template
    • Clone virtual machine
    • Create template from virtual machine
    • Customize guest
    • Deploy template
    • Mark as template
    • Mark as virtual machine
    • Modify customization specifications
    • Promote disks
    • Read customization specifications