vSphere Tagging privileges control the ability to create and delete tags and tag categories, and assign and remove tags on vCenter Server inventory objects.

You can set this privilege at different levels in the hierarchy. For example, if you set a privilege at the folder level, you can propagate the privilege to one or more objects within the folder. The object listed in the Required On column must have the privilege set, either directly or inherited.

Table 1. vSphere Tagging Privileges
Privilege Name Description Required On
vSphere Tagging.Assign or Unassign vSphere Tag

Allows assignment or unassignment of a tag for an object in the vCenter Server inventory.

Any object

vSphere Tagging.Create vSphere Tag

Allows creation of a tag.

Any object

vSphere Tagging.Create vSphere Tag Category

Allows creation of a tag category.

Any object

vSphere Tagging.Create vSphere Tag Scope Allows creation of a tag scope.

Any object

vSphere Tagging.Delete vSphere Tag

Allows deletion of a tag category.

Any object

vSphere Tagging.Delete vSphere Tag Category Allows deletion of a tag category.

Any object

vSphere Tagging.Delete vSphere Tag Scope Allows deletion of a tag scope.

Any object

vSphere Tagging.Edit vSphere Tag

Allows editing of a tag.

Any object

vSphere Tagging.Edit vSphere Tag Category

Allows editing of a tag category.

Any object

vSphere Tagging.Edit vSphere Tag Scope

Allows editing of a tag scope.

Any object

vSphere Tagging.Modify UsedBy Field for Category

Allows changing the UsedBy field for a tag category.

Any object

vSphere Tagging.Modify UsedBy Field for Tag

Allows changing the UsedBy field for a tag.

Any object