An administrator must have certain vCenter Server privileges to manage full clones and instant clones.
Horizon administrators need to create a custom role in vCenter Server and select the following privileges to manage full clones. The following table lists the minimum vCenter Server privileges to perform basic operations in vCenter Server.
| Task | Privilege Group on vCenter Server for Full Clones |
|---|---|
|
Folder |
| Allocation space | Datastore |
|
Virtual Machine |
| Assign virtual machine to a resource pool | Resource |
| Act as vCenter Server (required even if you do not use View Storage Accelerator) | Global |
| (All – if you are using Virtual SAN datastores of Virtual Volumes) | Profile Driven Storage |
| Implement View Storage Accelerator to enable ESXi host caching: Configure advanced settings. | Host |
| Task | Privilege Group on vCenter Server for Instant Clones |
|---|---|
|
Folder |
|
Datastore |
|
Virtual Machine |
| Assign virtual machine to a resource pool | Resource |
|
Global |
|
Host |
| Assign | Network |
| (All – if you are using Virtual SAN datastores of Virtual Volumes) | Profile Driven Storage |
Use vTPM with instant clones:
|
Cryptographic operations |