After a user or group and role pair is set for an inventory object, you can change the role paired with the user or group or change the setting of the Propagate check box. You can also remove the permission setting.


  1. Browse to the object in the vSphere Web Client object navigator.
  2. Click the Manage tab and select Permissions.
  3. Click the line item to select the user or group and role pair.
  4. Click Change role on permission.
  5. Select a role for the user or group from the Assigned Role drop-down menu.
  6. To propagate the privileges to the children of the assigned inventory object, click the Propagate check box and click OK.