To configure Update Manager settings, to manage baselines, patches, and upgrades, you must have the proper privileges. You can assign Update Manager privileges to different roles from the vSphere Web Client.

Update Manager privileges cover distinct functionalities.

Table 1. Update Manager Privileges
Privilege Group Privilege Description
Configure Configure Service Configure the Update Manager service and the scheduled patch download task.
Manage Baseline Attach Baseline Attach baselines and baseline groups to objects in the vSphere inventory.
Manage Baseline Create, edit, or delete baseline and baseline groups.
Manage Patches and Upgrades Remediate to Apply Patches, Extensions, and Upgrades Remediate virtual machines, virtual appliances, and hosts to apply patches, extensions, or upgrades. In addition, this privilege allows you to view compliance status.
Scan for Applicable Patches, Extensions, and Upgrades Scan virtual machines, virtual appliances, and hosts to search for applicable patches, extensions, or upgrades.
Stage Patches and Extensions Stage patches or extensions to hosts. In addition, this privilege allows you to view compliance status of the hosts.
View Compliance Status View baseline compliance information for an object in the vSphere inventory.
Upload File Upload File Upload upgrade images and offline patch bundles.

For more information about managing users, groups, roles, and permissions, see vCenter Server and Host Management.