1.5

Table Of Contents
Until the import is complete, the Group element contains only partial information. After the import is complete,
the element includes a list of users and other information.
<Group
xmlns="http://www.vmware.com/vcloud/v1.5"
name="Engineering"
id="urn:vcloud:group:44"
type="application/vnd.vmware.admin.group+xml"
href="https://vcloud.example.com/api/admin/group/44" ...>
<Link
rel="edit"
type="application/vnd.vmware.admin.group+xml"
href="https://vcloud.example.com/api/admin/group/44" />
<Link
rel="remove"
href="https://vcloud.example.com/api/admin/group/44" />
<Description>Research and development</Description>
<NameInSource>\C5\AF\B9\D4\9E\B5\32\40\AD\C5\E3\8E\17\4C\0D\28</NameInSource>
<UsersList>
<UserReference
type="application/vnd.vmware.admin.user+xml"
name="User-1"
href="https://vcloud.example.com/api/admin/user/18" />
<UserReference
type="application/vnd.vmware.admin.user+xml"
name="User-3"
href="https://vcloud.example.com/api/admin/user/19" />
</UsersList>
<Role
type="application/vnd.vmware.admin.role+xml"
name="vApp Wrangler"
href="https://vcloud.example.com/api/admin/role/102" />
</Group>
Working With Roles and Rights
A role associates a role name with a set of rights. A newly created organization includes a set of predefined
roles and rights inherited from the containing cloud. An organization administrator can add new roles or
modify predefined roles. You cannot create or modify rights.
vCloud Director uses roles, and their associated rights, to determine whether a user or group is authorized to
perform an operation. When you create or import a user or group, you must assign it a role. You can use one
of the predefined roles, or you can create a role from existing rights.
Predefined roles and rights are properties of a cloud. Roles that an organization administrator creates are
properties of the organization.
Predefined Roles and Their Rights
vCloud Director includes predefined roles. Each of these roles includes a set of default rights.
Table 6-3 lists the predefined vCloud Director roles and the default rights assigned to each role. A system
administrator can create new roles and modify existing roles, except the System Administrator role.
Chapter 6 Creating, Provisioning, and Managing Organizations
VMware, Inc. 153