5.1

Table Of Contents
rel="remove"
href="https://vcloud.example.com/api/admin/role/102"/>
<Description>Create and manage vApps</Description>
<RightReferences>
...
</RightReferences>
</Role>
Controlling Access to vApps and Catalogs
An organization administrator can use controlAccess links to control access to vApps and catalogs.
Catalogs and vApps include two types of access control links:
n
Links where rel="down".
<Link
rel="down"
type="application/vnd.vmware.vcloud.controlAccess+xml"
href="https://vcloud.example.com/api/
object-type
/
id
/controlAccess/"/>
Use this kind of link to retrieve the access control settings for the object identified in the href value.
n
Links where rel="controlAccess".
<Link
rel="controlAccess"
type="application/vnd.vmware.vcloud.controlAccess+xml"
href="https://vcloud.example.com/api/
object-type
/
id
/action/controlAccess/"/>
Use this kind of link to specify new access control settings for the object identified in the href value. You
specify the new access control settings in a ControlAccessParams element that you post to the URL that
the href value of this link specifies.
Granting Access to All Members of an Organization
To specify access controls that apply to all members of an organization, an organization administrator can set
IsSharedToEveryone to true and specify an access level in the EveryoneAccessLevel element. The following
ControlAccessParams element grants read access to all members of the organization.
<ControlAccessParams
xmlns="http://www.vmware.com/vcloud/v1.5">
<IsSharedToEveryone>true</IsSharedToEveryone>
<EveryoneAccessLevel>ReadOnly</EveryoneAccessLevel>
</ControlAccessParams>
Granting Access to Individual Members of an Organization
To specify access controls that apply to individuals, an organization administrator can set
IsSharedToEveryone to false and specify an access level in an AccessSettings element that the
ControlAccessParams request contains. An AccessSettings element is populated with one or more
AccessSetting elements, each of which assigns an access level to the user identified in the Subject element.
The following ControlAccessParams element grants full control to one user and read-only access to another
user.
<ControlAccessParams
xmlns="http://www.vmware.com/vcloud/v1.5">
<IsSharedToEveryone>true</IsSharedToEveryone>
<AccessSettings>
<AccessSetting>
Chapter 6 Creating and Managing Organizations
VMware, Inc. 191