Create a custom role for all Nutanix AHV permissions and additional VMware asset permissions
Follow this procedure when you want to grant RBAC global access to a user for Nutanix AHV and permissions for specific VMware assets. This role is useful for scenarios when you want to restore from VMware backup images and want to use the AHV workload after recovery.
To create a custom role for all Nutanix AHV permissions and additional VMware asset permissions
- On the left, select Security > RBAC and select Add.
- Select the Default AHV Administrator role. Then select Next.
- Provide a Role name and a description.
For example, include a description that the role allows users to manage Nutanix AHV and provides specific permissions for VMware.
- Under Permissions, select Edit.
- Go to AHV assets. Note that all permissions are selected already for that workload.
- Go to VMware assets.
- Select the following permissions:
View
Manage access
Restore
View jobs
- Select Assign.
- Under Workloads, select Edit.
- Choose from the following options:
To apply the wanted permissions for the workload to all existing and to future VMware assets, leave the following option enabled: Apply permissions to all existing and future VMware assets.
To apply the wanted permissions only to specific VMware assets, clear the option: Apply permissions to all existing and future VMware assets. Then select the assets to which you want to apply permissions and select Add.
- Select Assign.
- Under Users, select Edit. Then add the group or users that you want to have this RBAC role.
- Select Assign.
- When you are done configuring the role, select Add role.
- To view the roles that are assigned to the group or the user, select the Users tab.