To configure Update Manager settings, to manage baselines, patches, and upgrades, you must have the proper privileges. You can assign Update Manager privileges to different roles from the vSphere Web Client.

Update Manager privileges cover distinct functionalities.

Table 1. Update Manager Privileges

Privilege Group

Privilege

Description

Configure

Configure Service

Configure the Update Manager service and the scheduled patch download task.

Manage Baseline

Attach Baseline

Attach baselines and baseline groups to objects in the vSphere inventory.

Manage Baseline

Create, edit, or delete baseline and baseline groups.

Manage Patches and Upgrades

Remediate to Apply Patches, Extensions, and Upgrades

Remediate virtual machines, virtual appliances, and hosts to apply patches, extensions, or upgrades. In addition, this privilege allows you to view compliance status.

Scan for Applicable Patches, Extensions, and Upgrades

Scan virtual machines, virtual appliances, and hosts to search for applicable patches, extensions, or upgrades.

Stage Patches and Extensions

Stage patches or extensions to hosts. In addition, this privilege allows you to view compliance status of the hosts.

View Compliance Status

View baseline compliance information for an object in the vSphere inventory.

Upload File

Upload File

Upload upgrade images and offline patch bundles.

For more information about managing users, groups, roles, and permissions, see vCenter Server and Host Management.