6.0.3

d (Optional) Click Check Names to verify that the user or group exists in the identity source.
e Click OK.
5 Select a role from the Assigned Role drop-down menu.
The roles that are assigned to the object appear in the menu. The privileges contained in the role are
listed in the section below the role title.
6 (Optional) To limit propagation, deselect the Propagate to Child Objects check box.
The role is applied only to the selected object and does not propagate to the child objects.
7 Click OK to add the permission.
Change Permissions
After a user or group and role pair is set for an inventory object, you can change the role paired with the
user or group or change the seing of the Propagate check box. You can also remove the permission seing.
Procedure
1 Browse to the object in the vSphere Web Client object navigator.
2 Click the Manage tab and select Permissions.
3 Click the line item to select the user or group and role pair.
4 Click Change role on permission.
5 Select a role for the user or group from the Assigned Role drop-down menu.
6 To propagate the privileges to the children of the assigned inventory object, click the Propagate check
box and click OK.
Remove Permissions
You can remove permissions on an object in the object hierarchy for individual users or for groups. When
you do, the user no longer has the privileges associated with the role on the object.
Procedure
1 Browse to the object in the vSphere Web Client object navigator.
2 Click the Manage tab and select Permissions.
3 Click the appropriate line item to select the user or group and role pair.
4 Click Remove permission.
vCenter Server removes the permission seing.
Chapter 4 vSphere Permissions and User Management Tasks
VMware, Inc. 143