Virtual Machine Provisioning privileges control activities related to deploying and customizing virtual machines.

You can set this privilege at different levels in the hierarchy. For example, if you set a privilege at the folder level, you can propagate the privilege to one or more objects within the folder. The object listed in the Required On column must have the privilege set, either directly or inherited.

Table 1. Virtual Machine Provisioning Privileges
Privilege Name Description Required On
Virtual machine.Provisioning.Allow disk access

Allows opening a disk on a virtual machine for random read and write access. Used mostly for remote disk mounting.

Virtual machines

Virtual machine.Provisioning.Allow file access

Allows operations on files associated with a virtual machine, including vmx, disks, logs, and nvram.

Virtual machines

Virtual machine.Provisioning.Allow read-only disk access

Allows opening a disk on a virtual machine for random read access. Used mostly for remote disk mounting.

Virtual machines

Virtual machine.Provisioning.Allow virtual machine download

Allows read operations on files associated with a virtual machine, including vmx, disks, logs, and nvram.

Root host or vCenter Server

Virtual machine.Provisioning.Allow virtual machine files upload

Allows write operations on files associated with a virtual machine, including vmx, disks, logs, and nvram.

Root host or vCenter Server

Virtual machine.Provisioning.Clone template

Allows cloning of a template.

Templates

Virtual machine.Provisioning.Clone virtual machine

Allows cloning of an existing virtual machine and allocation of resources.

Virtual machines

Virtual machine.Provisioning.Create template from virtual machine

Allows creation of a new template from a virtual machine.

Virtual machines

Virtual machine.Provisioning.Customize guest

Allows customization of a virtual machine’s guest operating system without moving the virtual machine.

Virtual machines

Virtual machine.Provisioning.Deploy template

Allows deployment of a virtual machine from a template.

Templates

Virtual machine.Provisioning.Mark as template

Allows marking an existing powered off virtual machine as a template.

Virtual machines

Virtual machine.Provisioning.Mark as virtual machine

Allows marking an existing template as a virtual machine.

Templates

Virtual machine.Provisioning.Modify customization specification

Allows creation, modification, or deletion of customization specifications.

Root vCenter Server

Virtual machine.Provisioning.Promote disks

Allows promote operations on a virtual machine's disks.

Virtual machines

Virtual machine.Provisioning.Read customization specifications

Allows reading a customization specification.

Virtual machines