Specifications

VMware, Inc. 275
Chapter 17 Managing Users, Groups, Permissions, and Roles
IfyouremoveusersfromtheVirtualCenterdomain,theylosepermissionstoallobjects
intheVMwareInfrastructureandwillnotbeabletologinagain.Userswhoare
currentlyloggedonandareremovedfromthedomainretaintheirVMware
Infrastructurepermissionsonlyuntilthenextvalidationperiod(the
defaultisevery24
hours).Removingagroupdoesnotaffectthepermissionsgrantedindividuallytothe
usersinthatgroup,orthosegrantedaspartofinclusioninanothergroup.
Ifyouchangeauserʹsnameinthedomain,theexistingusernamebecomesinvalidin
theVMwareInfrastructure
system.Thesamemethodologyappliestogroups,butthis
appliestoagrouponlyafterVirtualCenterServerhasbeenrestarted.
Assigning Access Permissions
Afteranyadditionalrolesaredefinedandusersandgroupsarecreated,youmust
assigntheusersandgroupstheirroles,withassociatedpermissions,totherelevant
inventoryobjects.
To assign a user or group permission
1LogintotheVIClientasauserwiththeAdministratorprivileges.
2FromtheVIClient,clicktheInventorybuttonin
thenavigationbar.Expandthe
inventoryasneeded,andclicktheappropriateobject.
Theobjectsthatcanhavepermissionsassignedtothemare:
(S EE U PDATE )
 InVirtualCenter–Folders,datacenters,clusters,resourcepools,hosts
 InESXServer–Resourcepools,thehost,virtualmachines
3Withtheappropriateobjectselected,clickthePermissionstab.