When you use vSphere Configuration Profiles, you need a different set of privileges for each task.

Table 1. Required Privileges For Using vSphere Configuration Profiles
Task Privilege in the vSphere Client Privilege in the API Description
Create Cluster with vSphere Configuration Profiles enabled

Host.Inventory.CreateCluster

Host.Inventory.CreateCluster Create a cluster along with its initial configuration.
View Host Settings in the Cluster Configuration VMware vSphere Lifecycle Manager .Desired Configuration Management Privileges.Read-only access to desired configuration management platform VcIntegrity.ClusterConfiguration.View View the draft configuration document, current configuration settings, compliance reports, and pre-check reports.
Check Cluster Compliance
View Compliance Results
Run Remediation Pre-Check
View Remediation Pre-Check Results
View Draft Pre-Check Results
Remediate a Cluster Against the Desired Cluster Configuration VMware vSphere Lifecycle Manager .Desired Configuration Management Privileges.Remediate cluster to the desired configuration. VcIntegrity.ClusterConfiguration.Remediate Remediate a cluster against the draft configuration or transition a cluster to the desired configuration.
Transition to vSphere Configuration Profiles
Export a Configuration or Configuration Schema VMware vSphere Lifecycle Manager .Desired Configuration Management Privileges.Export desired cluster configuration VcIntegrity.ClusterConfiguration.Export Export the desired cluster configuration document.
Extract a Configuration Document from a Reference Host VMware vSphere Lifecycle Manager .Desired Configuration Management Privileges.Modify desired cluster configuration. VcIntegrity.ClusterConfiguration.Modify Modify the desired cluster configuration by crating a draft configuration, extracting a configuration document from a reference host, or importing a configuration.
Create a Draft Configuration for a Cluster
Import a Configuration