6.1

Site Recovery Manager Privileges,
Roles, and Permissions 1
Site Recovery Manager provides disaster recovery by performing operations for users. These operations
involve managing objects, such as recovery plans or protection groups, and performing operations, such as
replicating or powering off virtual machines. Site Recovery Manager uses roles and permissions so that only
users with the correct roles and permissions can perform operations.
Site Recovery Manager adds several roles to vCenter Server, each of which includes privileges to complete
Site Recovery Manager and vCenter Server tasks. You assign roles to users to permit them to complete tasks
in Site Recovery Manager.
Privilege
The right to perform an action, for example to create a recovery plan or to
modify a protection group.
Role
A collection of privileges. Default roles provide the privileges that certain
users require to perform a set of Site Recovery Manager tasks, for example
users who manage protection groups or perform recoveries. A user can have
at most one role on an object, but roles can be combined if the user belongs to
multiple groups that all have roles on the object.
Permission
A role granted to a particular user or user group on a specific object. A user
or user group is also known as a principal. A permission is a combination of
a role, an object, and a principal. For example, a permission is the privilege to
modify a specific protection group.
For information about the roles that Site Recovery Manager adds to vCenter Server and the privileges that
users require to complete tasks, see “Site Recovery Manager Roles Reference,” on page 17.
n
How Site Recovery Manager Handles Permissions on page 12
Site Recovery Manager determines whether a user has permission to perform an operation, such as
configuring protection or running the individual steps in a recovery plan. This permission check
ensures the correct authentication of the user, but it does not represent the security context in which
the operation is performed.
n
Site Recovery Manager and the vCenter Server Administrator Role on page 13
If a user or user group has the vCenter Server administrator role on a vCenter Server instance when
you install Site Recovery Manager, that user or user group obtains all Site Recovery Manager
privileges.
n
Site Recovery Manager and vSphere Replication Roles on page 13
When you install vSphere Replication with Site Recovery Manager, the vCenter Server administrator
role inherits all of the Site Recovery Manager and vSphere Replication privileges.
VMware, Inc.
11