API Guide

vCenter authorization

Authorization flow validates the following:

● Session token

● vCenter user credentials for the required permissions to run the API

Validate session token

OMIVV validates the token that is received from the API client against the following:

● Tampering

● Session validity

Validate vCenter user credentials

APIs are authorized against the vCenter user credentials, when required. Set an operational context which indicates the vCenter

and the associated user credentials.

An operation context is required to ensure the permissions available to the user. You can set an operation context by invoking

the corresponding API.

This context is unique to an OMIVV user session, and only a single context can be active for a session at a time. The different

OMIVV user sessions can invoke APIs that use a different vCenter context.

Security