Virtual Private Cloud OnDemand User's Guide

Role-based User Account Management
Administrators add new users in Virtual Private Cloud OnDemand and assign one or more roles to them.
User roles have a default group of privileges.
A user in Virtual Private Cloud OnDemand can either have administrator privileges or end user privileges,
but not both. The roles are mutually exclusive with the exception of the Network Administrator and Virtual
Infrastructure Administrator roles; meaning, you can assign a user to the Network Administrator and
Virtual Infrastructure Administrator roles, or the Account Administrator, Read-Only Administrator, or End
User role.
Specialized Administrative Roles
Specialized administrator roles allow you to assign one or multiple individuals to perform these tasks.
Table 4‑2. Description of the Administrative Roles
Administrative
Role
Description and Privileges Cannot Do Ideal For
Account
Administrators
Account Administrators can
perform all actions in
Virtual Private Cloud
OnDemand, including manage
users, virtual data centers,
networking resources, and access
My VMware to manage the
Virtual Private Cloud OnDemand
account.
— Managing all aspects of your
Virtual Private Cloud OnDemand
environment and account
management, including logging
into My VMware to manage your
VMware account and view
Virtual Private Cloud OnDemand
billing statements.
Virtual
Infrastructure
Administrators
Virtual Infrastructure
Administrators can add and
modify virtual data centers in
Virtual Private Cloud
OnDemand. Virtual Infrastructure
Administrators can manage
virtual machines. They can also
view gateways, networks, and
users.
Manage users, networks,
or gateways.
Manage the environment,
including virtual machines across
users, add vApps and media to
your company's catalog, and
create virtual data centers.
Network
Administrators
Network Administrators can
manage networks and gateways.
Network Administrators can also
view virtual data centers, virtual
machines, and users.
Manage users, virtual
data centers, or add
vApps and media to your
company's catalog.
Network administration.
Read-only
Administrators
Read-only Administrators can
view but not alter settings in
administration areas. Read-only
Administrators can view virtual
data centers, virtual machines,
gateways, networks, and users.
Add or edit virtual data
centers, networks,
gateways, users, or
vApps and media in your
company's catalog.
All personnel with purchasing and
support responsibilities.
End User Role
End users create and manage virtual machines within virtual data centers. As a member of the End User
role, you can perform the following tasks:
n
Add virtual machines based on a template from the VMware Public Catalog and from My Catalog, your
organization's custom templates.
n
Create a virtual machine in Virtual Private Cloud OnDemand and vCloud Director.
n
Power on, power off, reset, and suspend virtual machines in a virtual data center.
vCloud Air - Virtual Private Cloud OnDemand User's Guide
56 VMware, Inc.