2.0

Table Of Contents
VMware, Inc. 209
Chapter 10 Managing Roles and Permissions
GroupAisassignedRole1onvirtualmachineVM.
GroupBisassignedRole2onvirtualmachineVM.
User1belongstogroupsAandB.
User1isnotassignedindividualpermissions.
Inthisexample,whenUser1logson,theusercanbothpoweronandtakesnapshots
ofthevirtualmachine.
Thefollowingexampleshowshowauserspermissionscanbelimitedbyov erriding
grouppermissions:
Rolesandgroupsaredefinedasinthepreviousexample.
User1’sreadonlypermissionisremovedonthevirtualmachine.(Readonly
permissionisrequiredtopoweronavirtualmachine.)
Inthisexample,User1canstilltakesnapshotsbutcannolongerpoweronthevirtual
machine.
Whensettingpermissions,verifythatusershavetheappropriateprivilegesfor
each
actiononeachobjectandcategoryofobjects.