To create a permission, you assign a user or group and a role to an object.
The available users and groups include local users and groups on the host system. For Workstation Pro, users and groups in the Windows domain that the host system belongs to are also included. For remote hosts that vCenter Server manages, users and groups in the Windows domain list that vCenter Server references are also included.
The object of a permission can be a shared or remote virtual machine, the Shared VMs item, or a remote host. For remote hosts that vCenter Server manages, you can also set permissions on datacenters and folders within datacenters.
When you add a permission, you can indicate whether the permission propagates down the object hierarchy. Propagation is not universally applied. Permissions that you define for a child object always override the permissions that propagate from parent objects.
You cannot use Workstation Pro to create, remove, or modify users and groups. To manage users and groups, use the mechanisms that the host operating system provides.
Prerequisites
Verify that you know the default roles. See Default System Roles.
If you are setting a permission on a remote object, connect to the remote server. See Connect to a Remote Server.