As a vCenter Server administrator, you can create a custom vCenter Server role and assign privileges to it.

A service account is used by the App Volumes Manager to communicate with vCenter Server. The default administrator role can be used for this service account, but you can create a vCenter Server role with certain privileges, specifically for the App Volumes service account.

You can also use PowerCLI to create a custom role. See Create a Custom vCenter Server Role Using PowerCLI.

Procedure

  1. Manually create a new vCenter Server role.
  2. Assign privileges to the role.
    Object Permission
    Datastore
    • Allocate space
    • Browse datastore
    • Low-level file operations
    • Remove file
    • Update virtual machine files
    Folder
    • Create folder
    • Delete folder
    Global Cancel task
    Host
    • Create virtual machine
    • Delete virtual machine
    • Reconfigure virtual machine
    Resource Assign virtual machine to resource pool
    Sessions View and stop sessions
    Tasks Create task
    Virtual machine > Configuration
    • Add existing disk
    • Add new disk
    • Add or remove device
    • Change resource
    • Remove disk
    • Settings
    Interaction
    • Power Off
    • Power On
    • Suspend
    Inventory
    • Create from existing
    • Create new
    • Move
    • Register
    • Remove
    • Unregister
    Provisioning
    • Clone template
    • Clone virtual machine
    • Create template from virtual machine
    • Customize
    • Deploy template
    • Mark as template
    • Mark as virtual machine
    • Modify customization specifications
    • Promote disks
    • Read customization specifications