Generally, to install and manage the DSM plugin in vCenter Server, you use vSphere administrator credentials. Alternately, you might create a user with limited permissions, appropriate for installing and operating the DSM plugin.

This user can log in to vCenter Server and use the DSM vSphere plugin.

To create this user, you must first create a role with the following minimum required privileges, and then assign this role to the user.

For information about creating a role, see Create a vCenter Server Custom Role in the vSphere Security documentation. To assign the role, see Using vCenter Server Global Permissions.

Privileges Required as Global Permissions

Privilege Permissions
Permissions
  • Modify permission
Certificate Management
  • Create/Delete (Admin privileges)
Service Account Management
  • Administer (Create/Delete accounts & Reset passwords)
  • Create/Delete service accounts
  • Reset service account passwords

Privileges Required on the Root Folder

Privilege Permissions
Permissions
  • Modify permission
  • Modify role
Cns
  • Searchable
Datastore
  • Allocate space
  • Low level file operations
Extension
  • Register extension
  • Unregister extension
  • Update extension
Folder
  • Create folder
  • Delete folder
vSphere Tagging
  • Assign or Unassign vSphere Tag
  • Assign or Unassign vSphere Tag on Object
  • Create vSphere Tag
  • Create vSphere Tag Category
Network
  • Assign network
Resource
  • Assign virtual machine to resource pool
Sessions
  • Validate session
Profile-driven storage
  • Profile-driven storage view
vApp
  • Import
  • vApp application configuration
  • vApp instance configuration
Virtual machine
  • Change Configuration
    • Add existing disk
    • Add new disk
    • Add or remove device
    • Advanced configuration
    • Change CPU count
    • Change Memory
    • Change Settings
    • Change Swapfile placement
    • Change resource
    • Configure Host USB device
    • Configure Raw device
    • Configure managedBy
    • Extend virtual disk
    • Modify device settings
    • Remove disk
    • Set annotation
    • Toggle disk change tracking
    • Upgrade virtual machine compatibility
  • Edit Inventory
    • Create from existing
    • Create new
    • Remove
  • Interaction
    • Configure CD media
    • Configure floppy media
    • Connect devices
    • Power off
    • Power on
  • Provisioning
    • Allow read-only disk access
    • Allow virtual machine download
    • Clone template
    • Clone virtual machine
    • Create template from virtual machine
    • Customize guest
    • Deploy template
    • Mark as template
  • Snapshot management
    • Create snapshot
    • Remove snapshot