To support instant clones, the vCenter Server user must have privileges in addition to those required to support VMware Horizon.

Table 1. Minimum vCenter Server Privileges Required for the Horizon Administrator Role with Instant Clones
Privilege Group on vCenter Server Privileges to Enable
Cryptographic operations The following privileges are required if you use instant clones VMs with a Trusted Platform Module (vTPM) device.
  • Clone
  • Decrypt
  • Direct Access
  • Encrypt
  • Manage KMS
  • Migrate
  • Register Host
Datastore

Allocate space

Browse datastore

Folder

Create folder

Delete folder

Global

Act as vCenter Server

Disable methods

Enable methods

Manage custom attributes

Set custom attribute

Host

In Configuration

  • Advanced settings - Required to exchange initial pairing information with agents.

In Inventory

  • Modify Cluster - Required to tie Instant Clone parent VMs to specific hosts.
Network Assign network
Profile Driven Storage (all--If you are using vSAN datastores or Virtual Volumes)
Resource

Assign virtual machine to resource pool

Migrate powered on virtual machine

Storage views Not required
Virtual machine

In Change Configuration (all)

  • Acquire disk lease
  • Add existing disk
  • Add new disk
  • Add or remove device
  • Advanced configuration
  • Change CPU count
  • Change memory
  • Change resource
  • Change settings
  • Change swapfile placement
  • Configure Host USB device
  • Configure managedBy
  • Configure Raw device
  • Display connection settings
  • Extend virtual disk
  • Modify device settings
  • Query Fault Tolerance compatibility
  • Query unowned files
  • Reload from path
  • Remove disk
  • Rename
  • Reset guest information
  • Set annotation
  • Toggle disk change tracking
  • Toggle fork parent
  • Upgrade virtual machine compatibility

In Edit Inventory:

  • Create from existing
  • Create new
  • Move
  • Register
  • Remove
  • Unregister
In Interaction:
  • Connect devices
  • Perform wipe or shrink operations
  • Power off
  • Power on
  • Reset
  • Suspend
In Provisioning:
  • Allow disk access
  • Clone template
  • Clone Virtual Machine
  • Customize
  • Deploy template
  • Read customization specifications

In Snapshot management

  • Create snapshot
  • Remove snapshot
  • Rename snapshot
  • Revert snapshot