VC rights

[sfont3n]

trying to create a roll where a group of users are just able to power on, reset, and turnoff vms. also would like these users to be able to attach there cdrom from there pc to the vm. does anyone know exactly which rights the need to attach local cd-rom to vm?

[LarsLiljeroth]

That is the "Virtual Machine User" That one has these previledges

Power On

Power OFF

Suspend

Reset

Answer Questions

Console

Device connection

Configure CD

Configure Floppy

Tools install

Just what you listed... you can off course make your own role and take out some of the priviledges.

br

lars

If you found this information usefull please award points.

[sfont3n]

nope

get permission to perform this operation was denied

[LarsLiljeroth]

Hmm works fine for me..

Did you set these on the host or on the Vms ?

Since these priviledges are pure VM Guest rights make sure to set these on the VMs. In the Vitual machine and template view. We set it on a folder there and then add VM's in here...

[mike_laspina]

What groups and roles are applied to the object, you may be experiancing a permissions override at the object level.

[sfont3n]

what i have is 4 datacenters

in one of the datacenters there is cluster a and cluster b

i want this rights to apply to certain users and only aplly it to cluster b because thoes users only need to see cluster b

[KJPettersson]

Try to create a group with Read only access and no Propagate on the "root" object in VC (Host and clusters view).

edit

(And ofcourse add the users to the group

[mike_laspina]

No don't do that! We don't know how it is setup yet.

Let's find out what is configured first.

[hicksj]

Fully agree with Mike!

KJP - WHY would you suggest this? What are you trying to accomplish?

[sfont3n]

i am trying this with a test account

i gave my test account read only at the object layer of the cluster within the datacenter and still no luck

[KJPettersson]

to solve the problem with "premission denied" when you add userright "virtual machine user" and tty to mount the cdrom on an vm.

is there any other way?? (belive this is an BUG in VC..)

i got it from this post org... http://communities.vmware.com/message/862964#862964

[dpomeroy]

There are some permission related bugs in VC 2.5. One fix we got from VMware Support that resolved (some) of our issues is to apply the role "Virtual Machine Power User" at the "Host and Clusters" folder level for the group in question. MAKE SURE to uncheck the propagate permissions box, you only want this to apply on the hosts and clusters folder.

Don Pomeroy

VMware Communities User Moderator

[mike_laspina]

Do you have any builtin groups assigned to your objects that are inheriting rights? Like the users group.

You need to keep in mind that if a user is a member of two groups then the roles are unioned and then applied. These can be overriden at the object level.

[KJPettersson]

Yep, thats the way i had to solved it, only i used the "Read-Only" role, works fine so far.

[dpomeroy]

Thats interesting, did you get "read only" from VMware Support, or your own trial and error?

Don Pomeroy

VMware Communities User Moderator

[KJPettersson]

see last post at link i posted, he added read-only rights so i did the same thing

[mike_laspina]

Hello,

I'm not saying it is wrong. We just need to know what's there before changing it. Rights can disable everything if not applied carefully.

I have had to do a simmilar change on mine.

[sfont3n]

resolved

[KJPettersson]

What did you do to solve it?

[KJPettersson]

What did you do to solve it?