6.5.1

3 Click the Add icon, and click Add.
4 Select the user or group that will have the privileges defined by the selected role.
a From the Domain drop-down menu, select the domain for the user or group.
b Type a name in the Search box or select a name from the list.
The system searches user names, group names, and descriptions.
c Select the user or group and click Add.
The name is added to either the Users or Groups list.
d (Optional) Click Check Names to verify that the user or group exists in the identity source.
e Click OK.
5 Select a role from the Assigned Role drop-down menu.
The roles that are assigned to the object appear in the menu. The privileges contained in the role are
listed in the section below the role title.
6 (Optional) To limit propagation, deselect the Propagate to Child Objects check box.
The role is applied only to the selected object and does not propagate to the child objects.
7 Click OK to add the permission.
Change Permissions
After a user or group and role pair is set for an inventory object, you can change the role paired with the
user or group or change the setting of the Propagate check box. You can also remove the permission
setting.
Procedure
1 Browse to the object in the vSphere Web Client object navigator.
2 Click the Permissions tab.
3 Click a row to select a permission.
4 Click the Change role on permission icon.
5 Select a role for the user or group from the Assigned Role drop-down menu.
6 Toggle the Propagate to children check box to make changes to permission inheritance and click
OK.
Remove Permissions
You can remove permissions from an object in the object hierarchy for individual users or for groups.
When you do, the user or group no longer has the privileges associated with the role on the object.
Note You cannot remove permissions that are predefined by the system.
vSphere Security
VMware, Inc. 28