Inventory Service Tagging privileges control the ability to create and delete tags and tag categories, and assign and remove tags on vSphere inventory objects.

You can set this privilege at different levels in the hierarchy. For example, if you set a privilege at the folder level, you can propagate the privilege to one or more objects within the folder. The object listed in the Required On column must have the privilege set, either directly or inherited.

Table 1. vCenter Inventory Service Privileges

Privilege Name

Description

Required On

Inventory Service > vSphere Tagging > Assign or Unassign vSphere Tag

Allows assignment or unassignment of a tag for an object in the vCenter Server inventory.

Any object

Inventory Service > vSphere Tagging > Create vSphere Tag

Allows creation of a tag.

Any object

Inventory Service > vSphere Tagging > Create vSphere Tag Category

Allows creation of a tag category.

Any object

Inventory Service > vSphere Tagging > Create vSphere Tag Scope

Allows creation of a tag scope.

Any object

Inventory Service > vSphere Tagging > Delete vSphere Tag

Allows deletion of a tag category.

Any object

Inventory Service > vSphere Tagging > Delete vSphere Tag Category

Allows deletion of a tag category..

Any object

Inventory Service > vSphere Tagging > Delete vSphere Tag Scope

Allows deletion of a tag scope.

Any object

Inventory Service > vSphere Tagging > Edit vSphere Tag

Allows editing of a tag.

Any object

Inventory Service > vSphere Tagging > Edit vSphere Tag Category

Allows editing of a tag category.

Any object

Inventory Service > vSphere Tagging > Edit vSphere Tag Scope

Allows editing of a tag scope.

Any object

Inventory Service > vSphere Tagging > Modify UsedBy Field for Category

Allows changing the UsedBy field for a tag category.

Any object

Inventory Service > vSphere Tagging > Modify UsedBy Field for Tag

Allows changing the UsedBy field for a tag.

Any object