You can assign different roles, and right bundles to VMware Cloud Director Container Service Extension users. Each right and role allows users to perform different actions such as life cycle management of Tanzu Kubernetes Grid clusters, and perform administrative tasks in the Kubernetes Container Clusters UI.

The following table details the Kubernetes Clusters Rights Bundle, Kubernetes Cluster Author role, and CSE Admin Role that are created during the VMware Cloud Director Container Service Extension server configuration process.

Right Bundle or Role

Description
Kubernetes Clusters Rights Bundle This right bundle comprises of the rights required for managing Tanzu Kubernetes Grid clusters. By default, this right bundle is automatically published to all tenants. Service providers have the ability to publish and unpublish this rights bundle to specific tenants afterwards. For more information, see Publish or Unpublish a Rights Bundle.
Kubernetes Cluster Author role Assign this role to a user to manage Kubernetes clusters. For more information, see Assign Kubernetes Cluster Author Role to Tenant Users.

In order for organization administrators to view all of the clusters in an organization, it is necessary to grant the user the Administrator View: VMWARE:CAPVCDCLUSTER right.

Service providers must inform organization administrators that existing VMware Cloud Director Container Service Extension tenant users must be reassigned to the new Kubernetes Cluster Author role that is created in VMware Cloud Director Container Service Extension.
CSE Admin Role

You can create a user with CSE Admin Role in the system organization. The CSE Admin Role allows a user to perform administrative tasks in VMware Cloud Director Container Service Extension. You can use these user credentials as OVA deployment parameters when you start the VMware Cloud Director Container Service Extension server. For information, see Create a User with CSE Admin Role.

You can view the specific rights that are included in the Kubernetes Clusters Rights Bundle, Kubernetes Cluster Author role, and CSE Admin Role in the following sections.