System information

4 Select a role from the Assigned Role drop-down menu to assign to the user or user group that you
selected in Step 3.
The Assigned Role drop-down menu includes all of the roles that vCenter Server and its plug-ins make
available. Site Recovery Manager adds several roles to vCenter Server.
Option Action
Allow a user or user group to
perform all Site Recovery Manager
configuration and administration
operations.
Assign the SRM Administrator role.
Allow a user or user group to
manage and modify protection
groups and to configure protection
on virtual machines.
Assign the SRM Protection Groups Administrator role.
Allow a user or user group to
perform recoveries and test
recoveries.
Assign the SRM Recovery Administrator role.
Allow a user or user group to
create, modify, and test recovery
plans.
Assign the SRM Recovery Plans Administrator role.
Allow a user or user group to test
recovery plans.
Assign the SRM Recovery Test Administrator role.
When you select a role, the hierarchical list displays the privileges that the role includes. Click a
privilege in the hierarchical list to see a description of that privilege. You cannot modify the list of
privileges that each role includes.
5 Select Propagate to Children to apply the selected role to all of the child objects of the inventory objects
that this role can affect.
For example, if a role contains privileges to modify folders, selecting this option extends the privileges
to all the virtual machines in a folder. You might deselect this option to create a more complex
hierarchy of permissions. For example, deselect this option to override the permissions that are
propagated from the root of a certain node from the hierarchy tree, but without overriding the
permissions of the child objects of that node.
6 Click OK to assign the role and its associated privileges to the user or user group.
7 Repeat Step 2 through Step 6 to assign roles and privileges to the users or user groups on the other
Site Recovery Manager site.
You assigned a given Site Recovery Manager role to a user or user group. This user or user group has
privileges to perform the actions that the role defines on the objects on the Site Recovery Manager site that
you configured.
Example: Combining Site Recovery Manager Roles
You can assign only one role to a user or user group. If a user who is not a vCenter Server administrator
requires the privileges of more than one Site Recovery Manager role, you can create multiple user groups.
For example, a user might require the privileges to manage recovery plans and to run recovery plans.
1 Create two user groups.
2 Assign the SRM Recovery Plans Administrator role to one group.
3 Assign the SRM Recovery Administrator role to the other group.
4 Add the user to both user groups.
By being a member of groups that have both the SRM Recovery Plans Administrator and the SRM
Recovery Administrator roles, the user can manage recovery plans and run recoveries.
Site Recovery Manager Administration
16 VMware, Inc.