hi
howto create a new power user with web access permission ?
You can create your own custom role. Go to the Administration view (the bug button at the top of VIC) and then create your own role. It allows very granular control over what that role can do.
You can then add that role to your user when you give them access to whichever object you choose.
First off are you talking ESX or Virtual Center - if it is ESX the user will have to be created in the Service Console and then permissions granted to the new user through the VI client - if it is virtual center it is a windows user and created as a local user on the windows machine hosting virtual center or if the Windows machine is part of active directory than it can be a user in active directly - then from the vi client you can add the new user and grant the appropriate permissions
If you find this or any other answer useful please consider awarding points by marking the answer helpful or correct
How do you do it through VI client? I have been trying to figure that out. You can create roles, but there is no way I can find to associate it to a user!
Heck, I'll give you points if you can point me/us to something that can wlak an idiot like me through it.
Check out page 279 of the Basic System Administration Guide - http://www.vmware.com/pdf/vi3_35/esx_3/r35u2/vi3_35_25_u2_admin_guide.pdf - gives the step on how to take a role and user to create a permission an assign it to an object in the inventory -
And here up to now I was only up to page 278!
Man, I feel like an idiot. All this time I thought you had to have VC running (and which sources on the webalso led me to believe). I've been giving my devs root access with the threat of bodily harm because I didn't know how I could maintain host control while giving them the ability to adminster their VMs.
Now how do I give you points?
You should have on the left side underneath my name saying helpful answer or correct answer - but you might not since you created this thread anonymously -
It isn't my thread. You did answer the question so hopefully the OP will give you credit. I am already using your advice successfully on two hosts!
I really wish I could just open a new thread for you, friend. But that is probably not appreciated by the mods.
Hijacked it huh - well you are not going to be able to award points - just happy to help
Yes, I hijacked the thread, but your help has helped me alot with something that was perpetually on my backburner for awhile now. With your help it is was now checked off as 'done' in less than an hour.
Sorry I can't give you the points, but I can give you my eternal gratitude, and hopefully this wil help the OP and many others as well. Thanks for the answer I've been looking for!
I'd like to create a Virtual Center power user with web access permissions.
I've created a new user using VC VMware Infrastructure Client, but howto add power user permissions now ?
Hello,
You will need to assign permissions on an object for this user. They can be on any object, if you want them to see everything for example you add the permission to the Datacenter, if you want them to see only one VM, you add the permission to the VM. Right click on the object within VIC and select permissions.
Best regards,
Edward L. Haletky
VMware Communities User Moderator
====
Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.
SearchVMware Blog: http://itknowledgeexchange.techtarget.com/virtualization-pro/
Blue Gears Blogs - http://www.itworld.com/ and http://www.networkworld.com/community/haletky
As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization
thx, but under permissions I have administrator, read only and no access.
I'd like to have only a power user with web access, but not a administrator.
this power user should see, login, start and stop all VM's.
You can create your own custom role. Go to the Administration view
(the big button at the top of VIC) and then create your own role. It
allows very granular control over what that role can do.
You can then add that role to your user when you give them access to whichever object you choose.
You can create your own custom role. Go to the Administration view (the bug button at the top of VIC) and then create your own role. It allows very granular control over what that role can do.
You can then add that role to your user when you give them access to whichever object you choose.
thx a lot,
it works now.
VM user has these default permissions... VM Administrator has the same but can also do snapshots.
I have created a new role for a new user, but what does it mean folder permission ?
where exactly a user with this role can create, rename or delete folders ?
Hello,
Yes, that is exactly what 'Folder' means if you have it checked within the role you are creating.
Best regards,
Edward L. Haletky
VMware Communities User Moderator
====
Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.
SearchVMware Blog: http://itknowledgeexchange.techtarget.com/virtualization-pro/
Blue Gears Blogs - http://www.itworld.com/ and http://www.networkworld.com/community/haletky
As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization