Because VMware performs host administration and other tasks for you, a Cloud Administrator requires fewer privileges than an Administrator user on an on-premises data center.

The CloudAdmin role has all of the following permissions. The vSphere Defined Privileges reference provides detailed information about all privileges listed here, as well as other privileges that the CloudAdmin role does not have.

Alarms
  • Acknowledge alarm
  • Create alarm
  • Disable alarm action
  • Modify alarm
  • Remove alarm
  • Set alarm status
Permissions
  • Modify permission
  • Modify role
Certificates
  • Manage certificates
Content Library
  • Add library item
  • Create local library
  • Create subscribed library
  • Delete library item
  • Delete local library
  • Delete subscribed library
  • Download files
  • Evict library item
  • Evict subscribed library
  • Import storage
  • Probe subscription information
  • Read storage
  • Sync library item
  • Sync subscribed library
  • Type introspection
  • Update configuration settings
  • Update files
  • Update library
  • Update library item
  • Update local library
  • Update subscribed library
  • View configuration settings
Datastore
  • Allocate space
  • Browse datastore
  • Configure datastore
  • Low level file operations
  • Remove file
  • Update virtual machine files
  • Update virtual machine metadata
Folder
  • Create folder
  • Delete folder
  • Move folder
  • Rename folder
Global
  • Cancel task
  • Global tag
  • Health
  • Log event
  • Manage custom attributes
  • Service managers
  • Set custom attribute
  • System tag
Hybrid Linked Mode
  • Manage
Host
  • vSphere Replication.Manage Replication
vSphere Tagging
  • Assign or Unassign vSphere Tag
  • Create vSphere Tag
  • Create vSphere Tag Category
  • Delete vSphere Tag
  • Delete vSphere Tag Category
  • Edit vSphere Tag
  • Edit vSphere Tag Category
  • Modify UsedBy Field For Category
  • Modify UsedBy Field For Tag
Network
  • Assign Network
Resource
  • Apply recommendation
  • Assign vApp to resource pool
  • Assign virtual machine to resource pool
  • Create resource pool
  • Migrate powered off virtual machine
  • Migrate powered on virtual machine
  • Modify resource pool
  • Move resource pool
  • Query vMotion
  • Remove resource pool
  • Rename resource pool
Scheduled task
  • Create tasks
  • Modify task
  • Remove task
  • Run task
Sessions
  • Message
  • Validate session
Profile-driven storage
  • Profile-driven storage update
  • Profile-driven storage view
Storage views
  • View
VcTrusts/VcIdentity
  • Create/Update/Delete (below Admins priv).
vApp
  • Add virtual machine
  • Assign resource pool
  • Assign vApp
  • Clone
  • Create
  • Delete
  • Export
  • Import
  • Move
  • Power off
  • Power on
  • Rename
  • Suspend
  • Unregister
  • View OVF environment
  • vApp application configuration
  • vApp instance configuration
  • vApp managedBy configuration
  • vApp resource configuration
Virtual Machine
  • Change Configuration
    • Acquire disk lease
    • Add existing disk
    • Add new disk
    • Add or remove device
    • Advanced configuration
    • Change CPU count
    • Change Memory
    • Change Settings
    • Change Swapfile placement
    • Change resource
    • Configure Host USB device
    • Configure Raw device
    • Configure managedBy
    • Display connection settings
    • Extend virtual disk
    • Modify device settings
    • Query Fault Tolerance compatibility
    • Query unowned files
    • Reload from path
    • Remove disk
    • Rename
    • Reset guest information
    • Set annotation
    • Toggle disk change tracking
    • Upgrade virtual machine compatibility
  • Edit Inventory
    • Create from existing
    • Create new
    • Move
    • Register
    • Remove
    • Unregister
  • Guest operations
    • Guest operation alias modification
    • Guest operation alias query
    • Guest operation modifications
    • Guest operation program execution
    • Guest operation queries
  • Interaction
    • Answer question
    • Backup operation on virtual machine
    • Configure CD media
    • Configure floppy media
    • Connect devices
    • Console interaction
    • Create screenshot
    • Defragment all disks
    • Drag and drop
    • Guest operating system management by VIX API
    • Inject USB HID scan codes
    • Install VMware Tools
    • Pause or Unpause
    • Perform wipe or shrink operations
    • Power off
    • Power on
    • Reset
    • Suspend
  • Provisioning
    • Allow disk access
    • Allow file access
    • Allow read-only disk access
    • Allow virtual machine download
    • Allow virtual machine files upload
    • Clone template
    • Clone virtual machine
    • Create template from virtual machine
    • Customize guest
    • Deploy template
    • Mark as template
    • Mark as virtual machine
    • Modify customization specification
    • Promote disks
    • Read customization specifications
  • Service configuration
    • Allow notifications
    • Allow polling of global event notifications
    • Manage service configurations
    • Modify service configuration
    • Query service configurations
    • Read service configuration
  • Snapshot management
    • Create snapshot
    • Remove snapshot
    • Rename snapshot
    • Revert to snapshot
  • vSphere Replication
    • Configure replication
    • Manage replication
    • Monitor replication
    • Change Configuration
      • Acquire disk lease
      • Add existing disk
      • Add new disk
      • Add or remove device
      • Advanced configuration
      • Change CPU count
      • Change Memory
      • Change Settings
      • Change Swapfile placement
      • Change resource
      • Configure Host USB device
      • Configure Raw device
      • Configure managedBy
      • Display connection settings
      • Extend virtual disk
      • Modify device settings
      • Query Fault Tolerance compatibility
      • Query unowned files
      • Reload from path
      • Remove disk
      • Rename
      • Reset guest information
      • Set annotation
      • Toggle disk change tracking
      • Upgrade virtual machine compatibility
    • Edit Inventory
      • Create from existing
      • Create new
      • Move
      • Register
      • Remove
      • Unregister
    • Guest operations
      • Guest operation alias modification
      • Guest operation alias query
      • Guest operation modifications
      • Guest operation program execution
      • Guest operation queries
    • Interaction
      • Answer question
      • Backup operation on virtual machine
      • Configure CD media
      • Configure floppy media
      • Connect devices
      • Console interaction
      • Create screenshot
      • Defragment all disks
      • Drag and drop
      • Guest operating system management by VIX API
      • Inject USB HID scan codes
      • Install VMware Tools
      • Pause or Unpause
      • Perform wipe or shrink operations
      • Power off
      • Power on
      • Reset
      • Suspend
    • Provisioning
      • Allow disk access
      • Allow file access
      • Allow read-only disk access
      • Allow virtual machine download
      • Allow virtual machine files upload
      • Clone template
      • Clone virtual machine
      • Create template from virtual machine
      • Customize guest
      • Deploy template
      • Mark as template
      • Mark as virtual machine
      • Modify customization specification
      • Promote disks
      • Read customization specifications
    • Service configuration
      • Allow notifications
      • Allow polling of global event notifications
      • Manage service configurations
      • Modify service configuration
      • Query service configurations
      • Read service configuration
    • Snapshot management
      • Create snapshot
      • Remove snapshot
      • Rename snapshot
      • Revert to snapshot
    • vSphere Replication
      • Configure replication
      • Manage replication
      • Monitor replication
vService
  • Create dependency
  • Destroy dependency
  • Reconfigure dependency configuration
  • Update dependency