vApp privileges control operations related to deploying and configuring a vApp.
You can set this privilege at different levels in the hierarchy. For example, if you set a privilege at the folder level, you can propagate the privilege to one or more objects within the folder. The object listed in the Required On column must have the privilege set, either directly or inherited.
| Privilege Name in the vSphere Client | Description | Required On | Privilege Name in the API |
|---|---|---|---|
| Add virtual machine | Allows adding a virtual machine to a vApp. |
vApps |
VApp.AssignVM |
| Assign resource pool | Allows assigning a resource pool to a vApp. |
vApps |
VApp.AssignResourcePool |
| Assign vApp | Allows assigning a vApp to another vApp |
vApps |
VApp.AssignVApp |
| Clone | Allows cloning of a vApp. |
vApps |
VApp.Clone |
| Create | Allows creation of a vApp. |
vApps |
VApp.Create |
| Delete | Allows deletion a vApp. To have permission to perform this operation, a user or group must have this privilege assigned in both the object and its parent object. |
vApps |
VApp.Delete |
| Export | Allows export of a vApp from vSphere. |
vApps |
VApp.Export |
| Import | Allows import of a vApp into vSphere. |
vApps |
VApp.Import |
| Move | Allows moving a vApp to a new inventory location. |
vApps |
VApp.Move |
| Power Off | Allows power off operations on a vApp. |
vApps |
VApp.PowerOff |
| Power On | Allows power on operations on a vApp. |
vApps |
VApp.PowerOn |
| Pull from URL | Allows listing of remote source file descriptors. | vApps |
VApp.PullFromUrls |
| Rename | Allows renaming a vApp. |
vApps |
VApp.Rename |
| Suspend | Allows suspension of a vApp. |
vApps |
VApp.Suspend |
| Unregister | Allows unregistering a vApp. To have permission to perform this operation, a user or group must have this privilege assigned in both the object and its parent object. |
vApps |
VApp.Unregister |
| View OVF Environment | Allows viewing the OVF environment of a powered-on virtual machine within a vApp. |
vApps |
VApp.ExtractOvfEnvironment |
| vApp application configuration | Allows modification of a vApp's internal structure, such as product information and properties. |
vApps |
VApp.ApplicationConfig |
| vApp instance configuration | Allows modification of a vApp's instance configuration, such as policies. |
vApps |
VApp.InstanceConfig |
| vApp managedBy configuration | Allows an extension or solution to mark a vApp as being managed by that extension or solution. No vSphere Client user interface elements are associated with this privilege. |
vApps |
VApp.ManagedByConfig |
| vApp resource configuration | Allows modification of a vApp's resource configuration. To have permission to perform this operation, a user or group must have this privilege assigned in both the object and its parent object. |
vApps |
VApp.ResourceConfig |
