An administrator must have certain vCenter Server privileges to manage full clones and instant clones.
Horizon administrators need to create a custom role in vCenter Server and select the following privileges to manage full clones. The following table lists the minimum vCenter Server privileges to perform basic operations in vCenter Server.
| Privilege Group on vCenter Server for Full Clones | Task |
|---|---|
| Datastore | Allocate space |
| Folder |
|
| Global | Act as vCenter Server (required even if you do not use View Storage Accelerator) |
| Host | Implement View Storage Accelerator to enable ESXi host caching: Configure advanced settings. |
| Profile Driven Storage | (All – if you are using Virtual SAN datastores of Virtual Volumes) |
| Resource | Assign virtual machine to a resource pool |
| Virtual Machine |
|
| Privilege Group on vCenter Server for Instant Clones | Task |
|---|---|
| Cryptographic operations | Use vTPM with instant clones:
|
| Datastore |
|
| Folder |
|
| Global |
|
| Host |
|
| Network | Assign |
| Profile Driven Storage | (All – if you are using Virtual SAN datastores of Virtual Volumes) |
| Resource |
|
| Virtual Machine |
|