VMware vCenter Server privileges: using third party replication
To use any third party replication with VMware vCenter Server, the vCenter Server user needs to have a role assigned that has the privileges, listed in the table, on the vCenter server data center level.
Review the following considerations before assigning the privileges:
You need to maintain propagation of these data center level privileges on the child objects.
The child objects should not restrict the data center level privileges.
Table: VMware vCenter Server privileges required for disaster recovery using third party replication
Privilege | Navigation path in VMware vCenter Server |
|---|---|
Datastore.AllocateSpace Datastore.Browse Datastore.FileManagement Datastore.Rename Datastore.Move | Datastore > Allocate space Datastore > Browse datastore Datastore > Low level file operations Datastore > Rename Datastore > Move |
Host.Config.Network Host.Config.Storage | Host > Configuration > Network configuration Host > Configuration > Storage partition configuration |
Network.Assign | Network > Assign network |
Resource.ApplyRecommendation Resource.AssignVMToPool | Resource > Apply recommendation Resource > Assign virtual machine to resource pool |
System.Anonymous System.Read System.View | These privileges need not be set explicitly. |
VirtualMachine.Config.AddExistingDisk VirtualMachine.Config.AddNewDisk VirtualMachine.Config.AddRemoveDevice VirtualMachine.Config.AdvancedConfig VirtualMachine.Config.Resource VirtualMachine.Config.EditDevice VirtualMachine.Config.RawDevice VirtualMachine.Config.RemoveDisk VirtualMachine.Config.Rename VirtualMachine.Config.Settings | Virtual machine > Configuration > Add existing disk Virtual machine > Configuration > Add new disk Virtual machine > Configuration > Add or remove device Virtual machine > Configuration > Advanced Virtual machine > Configuration > Change resource Virtual machine > Configuration > Modify device settings Virtual machine > Configuration > Raw device Virtual machine > Configuration > Remove Disk Virtual machine > Configuration > Rename Virtual machine > Configuration > Settings |
VirtualMachine.GuestOperations.Modify VirtualMachine.GuestOperations.Execute VirtualMachine.GuestOperations.Query | Virtual machine > Guest operations > Guest operation modifications Virtual machine > Guest operations > Guest operation program execution Virtual machine > Guest operations > Guest operation queries |
VirtualMachine.Interact.DeviceConnection VirtualMachine.Interact.PowerOff VirtualMachine.Interact.PowerOn | Virtual machine > Interaction > Device connection Virtual machine > Interaction > Power off Virtual machine > Interaction > Power on |
VirtualMachine.Inventory.Register VirtualMachine.Inventory.Unregister | Virtual machine > Inventory > Register Virtual machine > Inventory > Unregister |
VirtualMachine.Provisioning.Customize | Virtual machine > Provisioning > Customize |
VApp.InstanceConfig VApp.ApplicationConfig | vApp > vApp instance configuration vApp > vApp application configuration |
In addition to the above privileges, you also need the privileges required for configuring ESX servers:
See VMware vCenter Server privileges: configuring ESX servers .
More Information