Datasheet

DEFINE USERS AND THEIR PRIVILEGES 15
Install, Con gure, and
Manage the vSphere
Environment
PART I
)
Process {
$Report = @()
$Report = import-csv $filename | Sort-Object -Property Path
foreach($vmpath in $Report){
$key = @()
$key = Split-Path $vmpath.Path | split-path -leaf
Move-VM (get-datacenter $dc `
| Get-VM $vmpath.Name) `
-Destination (get-datacenter $dc | Get-folder $key)
}
}
}
Import-VMLocation “DC01” “C:\VMLocation.csv”
Define Users and Their Privileges
e authorization to perform tasks in your virtual infrastructure is controlled by a
role-based access control (RBAC) system. A vCenter Server administrator can spec-
ify in great detail which users or groups can perform which tasks on which objects.
RBAC systems are de ned using three key concepts:
Privilege A privilege is the ability to perform an action or read a property.
Examples include powering on a VM or adding a folder.
Role A role is a collection of privileges. Roles provide a way to add all the indi-
vidual privileges that are required to perform a number of tasks, such as administer
a vSphere host.
Object An object is an item on which actions can be performed. vCenter Server
objects are datacenters, folders, resource pools, clusters, hosts, and VMs.
Granting Privileges
Privileges are found in the vSphere Client. When using the Assign Permissions wizard,
you are able to add new permissions.  e privileges are listed in Figure 1.2.
890790c01.indd 15890790c01.indd 15 3/3/11 10:22:15 AM3/3/11 10:22:15 AM