6.7

Table Of Contents
The direct parent for content libraries is the global root. This means that if you set a permission at a
vCenter Server level and propagate it to the children objects, the permission applies to data centers,
folders, clusters, hosts, virtual machines, and so on, but does not apply to the content libraries that you
see and operate with in this vCenter Server instance. To assign a permission on a content library, an
Administrator must grant the permission to the user as a global permission. Global permissions support
assigning privileges across solutions from a global root object.
The figure illustrates the inventory hierarchy and the paths by which permissions can propagate.
Figure 41. vSphere Inventory Hierarchy
template
host
VDS datastore
cluster
vApp
vApp
vApp
virtual
machine
virtual
machine
resource
pool
resource
pool
virtual
machine
virtual
machine
resource
pool
standard
switch
datastore
cluster
distributed
port group
VM folder host folder
data center
vCenter Server
(vCenter Server instance level)
network
folder
datastore
folder
data center
folder
root object
(global permissions level)
tag category
tag
content library
library item
vSphere Virtual Machine Administration
VMware, Inc. 62