6.1

Site Recovery Manager and the vCenter Server Administrator Role
If a user or user group has the vCenter Server administrator role on a vCenter Server instance when you
install Site Recovery Manager, that user or user group obtains all Site Recovery Manager privileges.
If you assign the vCenter Server administrator role to users or user groups after you install
Site Recovery Manager, you must manually assign the Site Recovery Manager roles to those users on
Site Recovery Manager objects.
You can assign Site Recovery Manager roles to users or user groups that do not have the vCenter Server
administrator role. In this case, those users have permission to perform Site Recovery Manager operations,
but they do not have permission to perform all vCenter Server operations.
Site Recovery Manager and vSphere Replication Roles
When you install vSphere Replication with Site Recovery Manager, the vCenter Server administrator role
inherits all of the Site Recovery Manager and vSphere Replication privileges.
If you manually assign a Site Recovery Manager role to a user or user group, or if you assign a
Site Recovery Manager role to a user or user group that is not a vCenter Server administrator, these users do
not obtain vSphere Replication privileges. The Site Recovery Manager roles do not include the privileges of
the vSphere Replication roles. For example, the Site Recovery Manager Recovery Administrator role
includes the privilege to run recovery plans, including recovery plans that contain vSphere Replication
protection groups, but it does not include the privilege to configure vSphere Replication on a virtual
machine. The separation of the Site Recovery Manager and vSphere Replication roles allows you to
distribute responsibilities between different users. For example, one user with the VRM administrator role is
responsible for configuring vSphere Replication on virtual machines, and another user with the
Site Recovery Manager Recovery Administrator role is responsible for running recoveries.
In some cases, a user who is not vCenter Server administrator might require the privileges to perform both
Site Recovery Manager and vSphere Replication operations. To assign a combination of
Site Recovery Manager and vSphere Replication roles to a single user, you can add the user to two user
groups.
Example: Assign Site Recovery Manager and vSphere Replication Roles to a
User
By creating two user groups, you can grant to a user the privileges of both a Site Recovery Manager role and
a vSphere Replication role, without that user being a vCenter Server administrator.
1 Create two user groups.
2 Assign a Site Recovery Manager role to one user group, for example Site Recovery Manager
administrator.
3 Assign a vSphere Replication role to the other user group, for example VRM administrator.
4 Add the user to both user groups.
The user has all the privileges of the Site Recovery Manager administrator role and of the VRM
administrator role.
Chapter 1 Site Recovery Manager Privileges, Roles, and Permissions
VMware, Inc. 13