Create a Custom Role

You can create vCenter Server custom roles to suit the access control needs of your environment. You can create a role or clone an existing role.

You can create or edit a role on a vCenter Server system that is part of the same vCenter Single Sign-On domain as other vCenter Server systems. The VMware Directory Service (vmdir) propagates the role changes that you make to all other vCenter Server systems in the group. Assignments of roles to specific users and objects are not shared across vCenter Server systems.

Prerequisites

Verify that you are logged in as a user with Administrator privileges.

Procedure

1. Log in to the vCenter Server by using the vSphere Client.
2. Select Administration and click Roles in the Access Control area.
3. Create the role:

   Option	Description
   To create a role	Click the Create role action icon.
   To create the role by cloning	Select a role, and click the Clone role action icon.

   See vCenter Server System Roles for more information.
4. Select and deselect privileges for the role.
   See Defined Privileges for more information.

   Note: When creating a cloned role, you cannot change privileges. To change privileges, select the cloned role after it is created and click the Edit role action icon.
5. Enter a name for the new role.
6. Click Finish.

What to do next

You can now create permissions by selecting an object and assigning the role to a user or group for that object.