Anyone know if this is possible? Thanks.
There is a SSO SDK, but I have to admit I never tried that.
There is also the ssowrench utility in the VCSA, see William's How to Add/Remove vCenter SSO Identity Sources Using the Command-Line for Windows vCenter Server & V... post.
Blog: lucd.info Twitter: @LucD22 Co-author PowerCLI Reference
The following set a permission on the rootfolder.
Is that what you mean by "global permission"?
$entity = Get-Folder -NoRecursion
$user = 'user@domain.com'
$role = Get-VIRole -Name Administrator
New-VIPermission -Entity $entity -Principal $user -Role $role -Propagate:$true -Confirm:$false
Blog: lucd.info Twitter: @LucD22 Co-author PowerCLI Reference
Thanks Luc. I'm referring to this:
- Login to web client with administrator@vsphere.local
- Go to administration, access control, global permissions, manage.
- If I add a user here with readonly role for example. That permission entry gets added to all vCenter servers.
I can loop through all the VCs with new-vipermission, but wanted to see if there was powercli commandlets to mimic adding global permissions through the gui.
There is a SSO SDK, but I have to admit I never tried that.
There is also the ssowrench utility in the VCSA, see William's How to Add/Remove vCenter SSO Identity Sources Using the Command-Line for Windows vCenter Server & V... post.
Blog: lucd.info Twitter: @LucD22 Co-author PowerCLI Reference
Thanks, I'll take a look.
Did someone got a solution for this...looking for command to set global permission via powercli
I am looking for a solution also. We are trying to export Global Permissions from one vCenter to another. Luckily its not so much, I can just do it by hand.