2.0
Table Of Contents
- vCenter Chargeback Manager User’s Guide
- Contents
- About the User's Guide
- Introduction to vCenter Chargeback Manager
- Configuring Administration Settings
- Authenticating and Managing Users, Roles, and Permissions
- Resource Based Authorization in vCenter Chargeback Manager
- Permissions Defined in vCenter Chargeback Manager
- Managing Roles
- Managing Users
- vCenter Chargeback Manager User Authentication
- Managing Chargeback Hierarchies
- Creating a Chargeback Hierarchy
- Managing a Chargeback Hierarchy
- View a Chargeback Hierarchy
- Add a vCenter Chargeback Manager Entity
- Add a vCenter Server Entity
- Rename a Chargeback Hierarchy or a Chargeback Entity
- Delete an Entity from the Hierarchy
- Delete a Chargeback Hierarchy
- Assign Attributes
- Move Entities Within a Hierarchy
- Allocate Computing Resource Units for a Chargeback Entity
- Share Virtual Machine Cost
- Backdate a Chargeback Hierarchy
- View Properties of a vCenter Server Entity
- Managing and Configuring vCenter Chargeback Manager Cost Elements
- Generating Reports
- Monitoring System Health
- Administration Utilities
- Index
Table 3-2. Permissions Applicable for Each Resource Type (Continued)
Resource Type Create Read Update Delete
Entity Cost
Modify
Tier Yes Yes Yes Yes Yes
Cost Model Yes Yes Yes Yes No
Cost Template Yes Yes Yes Yes No
Fixed Cost Yes Yes Yes Yes No
Report Yes Yes Yes Yes No
Schedule Yes Yes Yes Yes No
Role Yes Yes Yes Yes No
Billing Policy Yes Yes Yes Yes No
Automatic Report
Scheduler
Yes Yes Yes Yes No
You can assign permissions on a resource type to a user only through a role. However, you cannot assign
permissions for the following resource types:
n
Data Collector
n
LDAP Server
n
SMTP Server
n
vCenter Server Entity
n
Attribute
n
Role
The application automatically handles permissions for these resource types. Also, you cannot assign the create,
update, and delete permissions for the VMware vCenter Server resource type during custom role creation.
Managing Roles
A role is a set of permissions assigned to a user. vCenter Chargeback Manager provides some predefined roles
that can be assigned to the users and groups created or added to the application. You can also create any new
roles.
n
Predefined Roles in vCenter Chargeback Manager on page 38
vCenter Chargeback Manager provides various predefined roles that can be assigned to the application
users. The predefined roles are Super User, Administrator, Hierarchy Manager, Report Generator,
vCenter Guest User, No Access, Dependent Resource Update, and Dependent Resource Read. These
roles have a set of permissions on the various resource types defined in them.
n
Create a Role on page 42
Apart from the system-defined roles, you can define your own custom roles in vCenter Chargeback
Manager. These roles can then be assigned to the users created in the application.
n
Modify a Role on page 43
You can modify an existing role, other than the system-defined roles.
n
Delete a Role on page 43
You can delete any of the existing custom roles in the application. The system-defined roles cannot be
deleted.
Chapter 3 Authenticating and Managing Users, Roles, and Permissions
VMware, Inc. 37