4.1

n
Protection SRM Administrator role at the SRM site recovery root level (propagate).
n
Protection Groups Administrator role at the SRM protection groups level (propagate).
You must have the following permissions at the recovery site:
n
Recovery Inventory Administrator role at the vCenter root.
n
Recovery Datacenter Administrator role at the datacenter level (propagate).
n
Recovery Host Administrator
role at the host level (If the recovery host is a cluster, this permission must
be assigned for the cluster object itself and for every host in the cluster.)
n
Recovery Virtual Machine Administrator at the resource pool and folder levels (propagate).
n
Recovery SRM Administrator at the SRM root level (propagate).
n
Recovery Plans Administrator at the SRM recovery plans level (propagate).
You can grant selected roles or individuals the minimum set of privileges required to perform specific
operations. You can grant these privileges in addition to the default permissions for a role rather than giving
many users broad administrative powers.
Table 1-4 summarizes the permissions required for common SRM administrative tasks and the sites at which
those permissions must be granted.
Table 1-4. Site Recovery Manager Administrative Tasks and Minimum Required Privileges
Task
Site Minimum Required Privilege
Add new user and role Both Permissions > Modify Role
Assign access permission Both Permissions > Modify Permission
Change access permission Both Permissions > Modify Permission
Remove access permission Both Administrator
Connect (pair) sites Both Site Recovery Manager > Protection
SRM Administrator
Modify advanced settings Protected Site Recovery Manager > Protection
SRM Administrator
Modify advanced settings Recovery Site Recovery Manager > Recovery
SRM Administrator
Configure or repair array managers Both Site Recovery Manager > Array
Manager > Configure
Configure inventory preferences Both Site Recovery Manager > Inventory
Preferences > Create Mapping
Create protection groups Protected Site Recovery Manager > Protection
Group > Create
Create or modify a recovery plan Recovery Site Recovery Manager > Recovery
Plan > Create
Edit a recovery plan Recovery Site Recovery Manager > Recovery
Plan > Modify
Test a recovery plan Recovery Site Recovery Manager > Recovery
Plan > Test
Run or remove a recovery plan Recovery Site Recovery Manager > Recovery
Plan > Run
Site Recovery Manager Administration Guide
18 VMware, Inc.