Administration

Table 6‑2. Dierent Administrators for the Same Access Group
Administrator Role Access Group
view-domain.com\Admin1 Inventory Administrators
/CorporateDesktops
view-domain.com\Admin2 Inventory Administrators (Read only)
/CorporateDesktops
In this example, the administrator called Admin1 has the Inventory Administrators role on the access
group called CorporateDesktops and the administrator called Admin2 has the Inventory Administrators
(Read only) role on the same access group.
Understanding Permissions
View Administrator presents the combination of a role, an administrator user or group, and an access
group as a permission. The role defines the actions that can be performed, the user or group indicates
who can perform the action, and the access group contains the objects that are the target of the action.
Permissions appear differently in View Administrator depending on whether you select an administrator
user or group, an access group, or a role.
Table 6‑3 shows how permissions appear in View Administrator when you select an administrator user or
group. The administrator user is called Admin 1 and it has two permissions.
Table 6‑3. Permissions on the Administrators and Groups Tab for Admin 1
Role Access Group
Inventory Administrators
MarketingDesktops
Administrators (Read only)
/
The first permission shows that Admin 1 has the Inventory Administrators role on the access group called
MarketingDesktops. The second permission shows that Admin 1 has the Administrators (Read only)
role on the root access group.
Table 6‑4 shows how the same permissions appear in View Administrator when you select the
MarketingDesktops access group.
Table 6‑4. Permissions on the Folders Tab for MarketingDesktops
Admin Role Inherited
view-domain.com\Admin1 Inventory Administrators
view-domain.com\Admin1 Administrators (Read only) Yes
The first permission is the same as the first permission shown in Table 6‑3. The second permission is
inherited from the second permission shown in Table 6‑3. Because access groups inherit permissions
from the root access group, Admin1 has the Administrators (Read only) role on the MarketingDesktops
access group. When a permission is inherited, Yes appears in the Inherited column.
Table 6‑5 shows how the first permission in Table 6‑3 appears in View Administrator when you select the
Inventory Administrators role.
View Administration
VMware, Inc. 117