2.0

Table Of Contents
VMware Server User’s Guide
208 VMware, Inc.
Removing Permissions
Removingapermissionforauserorgroupdoesnotremovetheuserorgroup.Itdoes
notremovetheroleeither.Itremovesthepairingoftheroleandtheuserorgroupfrom
theselectedinve ntoryobject.
To remove a permission for a user or group
1Clickthehost’sorvirtualmachine’sPermissionstab.
2InthePermissionslist,
selectthepermissionyouwanttoremove.
3IntheCommandssection,clickRemovePermission.
4ClickOKtoconfirmthatyouwanttoremovethepermission.
Thepermissionisremoved.
Rules for Permission Propagation
Thissectiondescribespermissionprecedencewhenauserinheritspermissions
throughtheobjecthierarchyorgroupmembership.
Multiplepermissionscanbedefinedonanobject,andpermissionscanbeinherited
fromparentobjects.Permissionsdefinedonachildobjectalwaysoverridethose
definedonaparentobject.InVMwareServer,the
hostistheparentobjectfor
individualvirtualmachines.
Whenmultiplepermissionsaredefinedonthesameobjectthroughgroup
membership,thefollowingrulesapply:
Ifauserisamemberofmultiplegroupswithdifferentpermissions,foreachobject
thegrouphaspermissionson,thesamepermissionsapplyasifgrantedtotheuser
directly.
Ifmultiplegrouppermissionsaredefinedonthesameobjectandtheuserbelongs
totwoormoreofthegroups,permissionsaredeterminedasfollows:
Ifthereisnopermissiondefinedexplicitlyfortheuseronthatobject,theuser
isassignedtheunionofprivilegesassignedtothegroupsforthatobject.
Ifthereisapermissiondefinedexplicitlyfortheuseronthatobject,that
permissiontakesprecedenceoverallgrouppermissions.
Thefollowingexampleshowshowauserspermissionscanbeexpanded:
Role1includestheprivilegetopoweronvirtualmachines.
Role2includestheprivilegetotakesnapshotsofvirtualmachines.