Create a role at the root folder level, which allows the assigned user to:

  • Deploy Service Engine in a data center.

  • Create virtual NIC for the Service Engine.

  • Discover all available networks with Read Only access.

  • Discover the best possible host to deploy the Service Engine in Read Only mode.

Apply this role to the root level of the vCenter object hierarchy for giving the NSX Advanced Load Balancer Controller access to discover vCenter resources.