Each of the vSphere Lifecycle Manager privileges that you need to use baselines and baseline groups covers a distinct functionality.
|Configure||Configure the vSphere Lifecycle Manager service and the scheduled patch download task.|
|Manage Baseline||Attach baselines and baseline groups to objects in the vSphere inventory.|
|Create, edit, or delete baselines and baseline groups.|
|Manage Patches and Upgrades||Remediate virtual machines and hosts to apply patches, extensions, or upgrades. In addition, this privilege allows you to view the ompliance status of objects.|
|Scan virtual machines and hosts to search for applicable patches, extensions, or upgrades.|
|Stage patches or extensions to hosts. In addition, this privilege allows you to view the compliance status of hosts.|
|View baseline compliance information for an object in the vSphere inventory.|
|Upload File||Upload upgrade images and offline patch bundles.|
For more information about managing users, groups, roles, and permissions, see the vSphere Security documentation.