VMware Live Site Recovery includes a set of roles. Each role includes a set of privileges, which allow users with those roles to complete different actions.
Roles can have overlapping sets of privileges and actions. For example, the VMware Live Site Recovery Administrator role and the VMware Live Site Recovery Protection Groups Administrator have the Create privilege for protection groups. With this privilege, the user can complete one aspect of the set of tasks that make up the management of protection groups.
Assign roles to users on VMware Live Site Recovery objects consistently on both sites, so that protected and recovery objects have identical permissions.
All users must have at least the vCenter Server and the VMware Live Site Recovery root nodes on both sites.
privilege on the root folders ofRole | Actions that this Role Permits | Privileges that this Role Includes | Objects in vCenter Server Inventory that this Role Can Access |
---|---|---|---|
VMware Live Site Recovery Administrator | The VMware Live Site Recovery Administrator grants permission to perform all VMware Live Site Recovery configuration and administration operations.
The VMware Live Site Recovery Administrator user cannot edit inherited permissions. To restrict the access of a specific user or to grant access to a user, the VMware Live Site Recovery Administrator must add a new role. |
|
|
VMware Live Site Recovery Protection Groups Administrator | The VMware Live Site Recovery Protection Groups Administrator role allows users to manage protection groups.
Users with this role cannot perform or test recoveries or create or modify recovery plans. |
|
|
VMware Live Site Recovery Recovery Administrator | The VMware Live Site Recovery Recovery Administrator role allows users to perform recoveries and reprotect operations.
Users with this role cannot configure protection on virtual machines, or create or remove recovery plans. |
|
|
VMware Live Site Recovery Recovery Plans Administrator | The VMware Live Site Recovery Recovery Plans Administrator role allows users to create and test recovery plans.
Users with this role cannot configure protection on virtual machines, or perform recoveries or reprotect operations. |
|
|
VMware Live Site Recovery Test Administrator | The VMware Live Site Recovery Test Administrator role only allows users to test recovery plans.
Users with this role cannot configure protection on virtual machines, create protection groups or recovery plans, or perform recoveries or reprotect operations. |
|
|
VMware Live Site Recovery Remote User | The VMware Live Site Recovery Remote User role grants users the minimum set of privileges needed for cross site VMware Live Site Recovery operations. |
|
|