After you upgraded all vCloud Director servers and the shared database, you can upgrade the NSX Manager instances that provide network services to your cloud. After that, you can upgrade the ESXi hosts and the vCenter Server instances that are registered to your vCloud Director installation.

You can familiarize with the rights and roles model that vCloud Director 9.5 introduces.