A privilege is a system-defined requirement associated with a VMware vSphere managed object. Privileges are static and do not change for a version of a product. Privileges for vSphere components are defined as follows:
<group>[.<group>].privilege
For example:
Datacenter.Create Host.Config.Connection Host.Config.Snmp