6.0.3

Table 10‑1. Alarms Privileges (Continued)
Privilege Name Description Required On
Alarms.Remove alarm Allows deletion of an alarm. Object on which an alarm is dened
Alarms.Set alarm status Allows changing the status of the
congured event alarm. The status can
change to Normal, Warning, or Alert.
Object on which an alarm is dened
Auto Deploy and Image Profile Privileges
Auto Deploy privileges control who can perform dierent tasks on Auto Deploy rules, and who can
associate a host. Auto Deploy privileges also allow you to control who can create or edit an image prole.
The table describes privileges that determine who can manage Auto Deploy rules and rule sets and who can
create and edit image proles. See vSphere Installation and Setup.
You can set this privilege at dierent levels in the hierarchy. For example, if you set a privilege at the folder
level, you can propagate the privilege to one or more objects within the folder. The object listed in the
Required On column must have the privilege set, either directly or inherited.
Table 10‑2. Auto Deploy Privileges
Privilege Name Description Required On
Auto
Deploy.Host.AssociateMachine
Allows users to run a PowerCLI command
that associates a host with a machine.
vCenter Server
Auto Deploy.Image
 .Create
Allows creation of image proles. vCenter Server
Auto Deploy.Image  .Edit Allows editing of image proles. vCenter Server
Auto Deploy.Rule .Create Allows creation of Auto Deploy rules. vCenter Server
Auto Deploy.Rule .Delete Allows deletion of Auto Deploy rules. vCenter Server
Auto Deploy.Rule .Delete Allows editing of Auto Deploy rules. vCenter Server
Auto Deploy.RuleSet .Activate Allows activation of Auto Deploy rule sets. vCenter Server
Auto Deploy.RuleSet .Edit Allows editing of Auto Deploy rule sets. vCenter Server
Certificates Privileges
Certicates privileges control which users can manage ESXi certicates.
This privilege determines who can perform certicate management for ESXi hosts. See “Required Privileges
for Certicate Management Operations,” on page 119 for information on vCenter Server certicate
management.
You can set this privilege at dierent levels in the hierarchy. For example, if you set a privilege at the folder
level, you can propagate the privilege to one or more objects within the folder. The object listed in the
Required On column must have the privilege set, either directly or inherited.
Table 10‑3. Host Certificates Privileges
Privilege Name Description Required On
. Manage

Allows certicate management for ESXi hosts. vCenter Server
Chapter 10 Defined Privileges
VMware, Inc. 257