To configure Update Manager settings, to manage baselines, patches, and upgrades, you must have the proper privileges. You can assign Update Manager privileges to different roles from the vSphere Web Client and the vSphere Client.
Update Manager privileges cover distinct functionalities.
| Privilege Group | Privilege | Description |
|---|---|---|
| Configure | Configure Service | Configure the Update Manager service and the scheduled patch download task. |
| Manage Baseline | Attach Baseline | Attach baselines and baseline groups to objects in the vSphere inventory. |
| Manage Baseline | Create, edit, or delete baseline and baseline groups. | |
| Manage Patches and Upgrades | Remediate to Apply Patches, Extensions, and Upgrades | Remediate virtual machines and hosts to apply patches, extensions, or upgrades. In addition, this privilege allows you to view compliance status. |
| Scan for Applicable Patches, Extensions, and Upgrades | Scan virtual machines and hosts to search for applicable patches, extensions, or upgrades. | |
| Stage Patches and Extensions | Stage patches or extensions to hosts. In addition, this privilege allows you to view compliance status of the hosts. | |
| View Compliance Status | View baseline compliance information for an object in the vSphere inventory. | |
| Upload File | Upload File | Upload upgrade images and offline patch bundles. |
For more information about managing users, groups, roles, and permissions, see vCenter Server and Host Management.
