2.0

Table Of Contents
Assign a Role to a User on vCenter Chargeback Manager
The role assigned to the user on vCenter Chargeback Manager defines the actions that the user can perform in
the application. A user must have a role assigned to him on vCenter Chargeback Manager or on the resource
defined in the application to enable him to perform some actions in the application.
When you create a user, no roles or permissions are assigned to it by default. You can assign the Super User
role or the Administrator role when creating the user. Alternately, you can assign a role to the user after creating
the user.
You can assign only a single role to a user on vCenter Chargeback Manager. If the user already has a role
assigned to it, the same is removed and the new role is set on the user. Only a user with the Super User role
can assign the Super User role or the Administrator role to a user on vCenter Chargeback Manager.
You must have the Super User role or the Administrator role to perform this task.
NOTE If you assign a role to an LDAP group for a resource, then the LDAP users belonging to the LDAP group
will be assigned the same role on the resources. However, the LDAP user cannot perform any action on the
resources, if the LDAP group does not have at least read privileges on the various resource types at the vCenter
Chargeback Manager level.
Procedure
1 In the Users & Roles tab, click Permissions.
A page listing the users, their type, whether the user has the Super User role or the Administrator role,
and if the user is a vCenter Server user then the vCenter Server name or if the user is an LDAP user or
group then the IP address of the LDAP server is displayed. The page also provides an option to select a
resource type.
2 Select the user from the table listing the users.
If any role has already been assigned to the user on vCenter Chargeback Manager, the same is displayed
under Currently Assigned Role.
3 Select the required role from the menu under Set/Reset Role.
Ensure that you do not select any resource on the left-side pane.
NOTE You cannot assign the Super User role on an LDAP user or group.
4 Click Apply.
The selected role is assigned to the user on vCenter Chargeback Manager.
What to do next
Assigning a role on vCenter Chargeback Manager, other than the Super User role, only defines the actions that
the user can perform in the application. This does not implicitly give access to the resources created in the
application. To access a resource, the user must have either created it or should be explicitly assigned a role
for the resource. If the user is assigned the Administrator role, then he implicitly gets access to all the resources
created by the users that he has created.
Assigning the Super User role to a user automatically provides him with complete access to all the resources.
You need not explicitly assign a role to the user for each of the resources created in the application.
Chapter 3 Authenticating and Managing Users, Roles, and Permissions
VMware, Inc. 49