An administrator must have certain vCenter Server privileges to manage full clones and instant clones.
Horizon administrators need to create a custom role in vCenter Server and select the following privileges to manage full clones. The following table lists the minimum vCenter Server privileges to perform basic operations in vCenter Server.
Privilege Group on vCenter Server for Full Clones | Task |
---|---|
Datastore | Allocate space |
Folder |
|
Global | Act as vCenter Server (required even if you do not use View Storage Accelerator) |
Host | Implement View Storage Accelerator to enable ESXi host caching: Configure advanced settings. |
Profile Driven Storage | (All – if you are using Virtual SAN datastores of Virtual Volumes) |
Resource | Assign virtual machine to a resource pool |
Virtual Machine |
|
Privilege Group on vCenter Server for Instant Clones | Task |
---|---|
Cryptographic operations | Use vTPM with instant clones:
|
Datastore |
|
Folder |
|
Global |
|
Host |
|
Network | Assign |
Profile Driven Storage | (All – if you are using Virtual SAN datastores of Virtual Volumes) |
Resource |
|
Virtual Machine |
|