Create a custom role for all VMware permissions and additional Nutanix AHV asset permissions
Follow this procedure when you want to grant RBAC global access to a user for VMware and permissions for specific Nutanix AHV assets.
To create a custom role for all VMware permissions and additional Nutanix AHV asset permissions
- On the left, select Security > RBAC and select Add.
- Select the Default VMware Administrator role. Then select Next.
- Provide a Role name and a description.
For example, include a description that the role allows users to manage VMware and provides specific permissions for Nutanix AHV.
- Under Permissions, select Edit.
- Go to VMware assets. Note that all permissions are selected already for that workload.
- Go to AHV assets > AHV clusters, VMs, and storage containers.
- Select all permissions except for Granular restore.
- Go to AHV assets > Prism Central.
- Select all the permissions in that group.
- Do select any permissions for the group AHV intelligent VM groups.
- Select Assign.
- Under Workloads, select Edit.
- Choose from the following options:
To apply the wanted permissions for the workload to all existing and to future Nutanix AHV assets, leave the following option enabled: Apply permissions to all existing and future AHV assets.
To apply the wanted permissions only to specific VMware assets, clear the option: Apply permissions to all existing and future AHV assets. Then select the assets to which you want to apply permissions and select Add.
- Select Assign.
- Under Users, select Edit. Then add the group or users that you want to have this RBAC role.
- Select Assign.
- When you are done configuring the role, select Add role.
- To view the roles that are assigned to the group or the user, select the Users tab.