5.5

Assign SRM Roles and Permissions
During installation, SRM administrator rights are assigned to the vCenter Server administrator role. At this
time, only vCenter Server administrators can log in to SRM, unless they explicitly grant access to other
users.
To allow other users to access SRM, vCenter Server administrators must grant them permissions in the SRM
interface. Permission assignments apply on a per-site basis. You must add corresponding permissions on
both sites.
SRM requires permissions on vCenter Server objects as well as on SRM objects. To configure permissions on
the remote vCenter Server installation, start another instance of the vSphere Client. You can change SRM
permissions from the same interface on both sites after you connect the protected and recovery sites.
SRM augments vCenter Server roles and permissions with additional permissions that allow detailed
control over SRM specific tasks and operations. For information about the permissions that each SRM role
includes, see “SRM Roles Reference,” on page 14.
Procedure
1 Click Sites in the SRM interface, and select the site on which to assign permissions.
2 Click the Permissions tab.
3 Right-click anywhere in the panel for either the local or remote sites and select Add Permission.
4 Click Add.
5 Identify a user or group for the role.
a From the Domain drop-down menu, select the domain that contains the user or group.
b Enter a user or user group name in the Search text box or select a name from the Name list.
c Click Add and click OK.
6 Select a role from the Assigned Role drop-down menu to assign to the user or user group that you
selected.
The Assigned Role drop-down menu includes all of the roles that vCenter Server and its plug-ins make
available. SRM adds several roles to vCenter Server.
Option Action
Allow a user or user group to
perform all SRM configuration and
administration operations.
Assign the SRM Administrator role.
Allow a user or user group to
manage and modify protection
groups and to configure protection
on virtual machines.
Assign the SRM Protection Groups Administrator role.
Allow a user or user group to
perform recoveries and test
recoveries.
Assign the SRM Recovery Administrator role.
Allow a user or user group to
create, modify, and test recovery
plans.
Assign the SRM Recovery Plans Administrator role.
Allow a user or user group to test
recovery plans.
Assign the SRM Recovery Test Administrator role.
When you select a role, the hierarchical list displays the privileges that the role includes. Click a
privilege in the hierarchical list to see a description of that privilege. You cannot modify the list of
privileges that each role includes.
Chapter 1 SRM Privileges, Roles, and Permissions
VMware, Inc. 13