Datacenter privileges control the ability to create and edit datacenters in the vSphere Web Client inventory.

The table describes the privileges required to create and edit datacenters. All datacenter privileges are used in vCenter Server only. The Create datacenter privilege is defined on datacenter folders or the root object. All other datacenter privileges are pair with datacenters, datacenter folders, or the root object.

You can set this privilege at different levels in the hierarchy. For example, if you set a privilege at the folder level, you can propagate the privilege to one or more objects within the folder. The object listed in the Required On column must have the privilege set, either directly or inherited.

Table 1. Datacenter Privileges

Privilege Name


Required On

Datacenter > Create datacenter

Allows creation of new datacenter.

Datacenter folder or root object

Datacenter > Move datacenter

Allows moving a datacenter.

Privilege must be present at both the source and destination.

Datacenter, source and destination

Datacenter > Network profile configuration

Allows configuration of the network profile for a datacenter.


Datacenter > Query IP pool allocation

Allows configuration of a pool of IP addresses.


Datacenter > Reconfigure datacenter

Allows reconfiguration of a datacenter.


Datacenter > Release IP allocation

Allows releasing the assigned IP allocation for a datacenter.


Datacenter > Remove datacenter

Allows removal of a datacenter.

In order to have permission to perform this operation, you must have this privilege assigned to both the object and its parent object.

Datacenter plus parent object

Datacenter > Rename datacenter

Allows changing the name of a datacenter.