Managing Permission

[Krede]

Hi.

I have a need for adding specific virtual machine rights on some "VM folders" in my ESX farm.

As for now I have created a group in Active Directory and added that group on a particular folder in VI - but the users in that group is only able to see the containing machines if they get "read only" rights at the top (Datacenter level) - that means that they can see all the machines in our farm which I don't like because they only need to see the machines in the folder witch I gave them rights to.

In the future ill have multiples external vendors on my farm that needs access to only relevant machines.

Does anyone have some strategy recommendations for accomplishing this?

/Christian

[yanivamrami · Accepted solution]

Hi,

I have it works this way:

I've created bunch of VMs and assigned them to the relevant folders.

On each folder I set the relevant permissions to my AD groups.

The outcome is that each group can login to VI Client / Web Console and see/manage their VMs only.

They do not see other VMs.

Try to do that via the Virtual Machines and Templates view.

Yaniv

[Krede]

Ok - its seems like I overlooked that I was in the "Host and Cluster" view - when entering "Virtual Machine and Template" view I see the relevant machines without assigning Data Center Read Only Rights.

[yanivamrami]

Great.

Do not forget to rate if I helped...

Thanks