Installation guide

Defined Privileges A
The following tables list the default privileges that, when selected for a role, can be paired with a user and
assigned to an object. The tables in this appendix use VC to indicate vCenter Server and HC to indicate host
client, a standalone ESX/ESXi host.
When setting permissions, verify all the object types are set with appropriate privileges for each particular
action. Some operations require access permission at the root folder or parent folder in addition to access to
the object being manipulated. Some operations require access or performance permission at a parent folder
and a related object.
vCenter Server extensions might define additional privileges not listed here. Refer to the documentation for
the extension for more information on those privileges.
This appendix includes the following topics:
n
“Alarms,” on page 298
n
“Datacenter,” on page 299
n
“Datastore,” on page 299
n
“Distributed Virtual Port Group,” on page 300
n
“Distributed Virtual Switch,” on page 301
n
“Extensions,” on page 302
n
“Folders,” on page 302
n
“Global,” on page 303
n
“Host CIM,” on page 304
n
“Host Configuration,” on page 304
n
“Host Inventory,” on page 306
n
“Host Local Operations,” on page 307
n
“Host Profile,” on page 308
n
“Network,” on page 308
n
“Performance,” on page 309
n
“Permissions,” on page 310
n
“Resource,” on page 310
n
“Scheduled Task,” on page 312
n
“Sessions,” on page 312
VMware, Inc.
297