Installation guide

Table 4-8. Datastore Privileges (Continued)
Privilege Name Actions Granted to Users Affects
Pair with
Object
Effective on
Object
Delete Datastore
File
Delete a file in the datastore. hosts, vCenter
Servers
datastores datastores
File Management Carry out file operations in the datastore
browser.
hosts, vCenter
Servers
datastores datastores
Move Datastore Move a datastore between folders in the
inventory.
NOTE Privileges are required on both the
source and destination objects.
vCenter Servers datastore,
source and
destination
object
datastores,
datastore folders
Rename Datastore Rename a datastore. hosts, vCenter
Servers
datastores datastores
Update Datastore Permissions
You must change Read-only nonpropagating datastore permissions to propagating datastore permissions in
order for users to access the datastores. You can assign datastore permissions on datastores or folders
containing datastores.
Prerequisites
Before performing the upgrade procedure, determine which users need access to each datastore and which
privileges each user needs. If necessary, define new datastore roles or modify the Database Consumer sample
role. This sample role assigns the Allocate Space privilege to the datastore, which enables users to perform
basic virtual machine operations, such as creating clones and taking snapshots. In addition, organize your
datastores in folders that coincide with users' access needs.
NOTE The Read-only propagating permission on a datacenter, in addition to all permissions you have set,
will be kept intact after the datastore permissions upgrade.
Procedure
1 Log in to vSphere Client as an administrator.
2 On the Home page, click Datastores to display the datastores in the inventory.
3 Select the datastore or datastore folder and click the Permissions tab.
4 Right-click in the Permissions tab and from the context pop-up menu, choose Add Permission.
5 In the Assigned Role pane, assign a role.
n
To assign specific datastore privileges defined in a role by your company, choose the custom role.
n
To migrate read-only nonpropagating datacenter permissions to propagating datastore permissions,
choose Datastore Consumer (sample). This role assigns the Allocate Space privilege to users, which
is required so that users can consume space on the datastores on which this role is granted. In order
to perform a space-consuming operation, such as creating a virtual disk or taking a snapshot, the user
must also have the appropriate virtual machine privileges granted for these operations.
n
To assign Read-only datastore privileges, choose Read-only.
This role enables users to browse the datastore without giving them other datastore privileges. For
example, choose Read-only for users who need to attach CD/DVD-ROM ISO images to a datastore.
6 Select Propagate to Child Objects.
7 In the Users and Groups pane, click Add.
Chapter 4 Upgrading to vCenter Server 5.0
VMware, Inc. 65