Folder privileges control the ability to create and manage folders.

You can set this privilege at different levels in the hierarchy. For example, if you set a privilege at the folder level, you can propagate the privilege to one or more objects within the folder. The object listed in the Required On column must have the privilege set, either directly or inherited.

Table 1. Folder Privileges
Privilege Name in the vSphere Client Description Required On Privilege Name in the API
Create folder

Allows creation of a new folder.

Folders

Folder.Create
Delete folder

Allows deletion of a folder.

To have permission to perform this operation, a user or group must have this privilege assigned in both the object and its parent object.

Folders

Folder.Delete
Move folder

Allows moving a folder.

Privilege must be present at both the source and destination.

Folders

Folder.Move
Rename folder

Allows changing the name of a folder.

Folders

Folder.Rename