vSphere Zones privileges control who can create and manage vSphere Zones on vSphere with Tanzu.

Table 1. vSphere Zones Privileges
Privilege Name in the vSphere Client Description Required On Privilege Name in the API
Attach and Detach vSphere objects for vSphere Zones Allows for associating objects with a vSphere Zone.

Clusters

Zone.ObjectAttachable
Create, Update and Delete vSphere Zones and their associations Allows for creating and deleting a vSphere Zone.

Clusters

Zone.Manage