VMware vSphere Lifecycle Manager Image privileges control the ability to manage images.

You can set this privilege at different levels in the hierarchy. For example, if you set a privilege at the folder level, you can propagate the privilege to one or more objects within the folder. The object listed in the Required On column must have the privilege set, either directly or inherited.

Table 1. VMware vSphere Lifecycle Manager Image Privileges
Privilege Name Description Required On
VMware vSphere Lifecycle Manager.Lifecycle Manager: Image Privileges.Read Allows reading of vSphere Lifecycle Manager images. This privilege is required to:
  • List all the drafts for a cluster
  • Get more information on a draft
  • Perform a scan on a draft
  • Validate a draft
  • Retrieve the contents of a draft
  • Compute the effective component list
  • Get the contents of the current desired state document
  • Start a scan on a cluster
  • Get the compliance result
  • Get a recommendation
  • Export the current desired state as a depot, JSON file, or ISO

Root vCenter Server

VMware vSphere Lifecycle Manager.Lifecycle Manager: Image Privileges.Write Allows managing of vSphere Lifecycle Manager images. This privilege is required to:
  • Create, delete, or commit a draft
  • Import the desired state
  • Generate recommendations
  • Set or delete different portions of a draft

Root vCenter Server