| Roles | Description |
|---|---|
| NoAccess | Cannot view orchange the assigned object.vSphere Client tabs associated with an object appear without content.Can be used to revoke permissions that would otherwise be propagated to anobject from a parent object.Available in ESX/ESXi and vCenter Server. |
| ReadOnly | View the stateand details about the object.View all the tab panels in the vSphere Client except the Console tab.Cannot perform any actions through the menus and toolbars.Available on ESX/ESXi and vCenter Server |
| Administrator | Allprivileges for all objects.Add, remove, and set access rights and privileges for all the vCenterServer users and all the virtual objects in the vSphere environment.Available in ESX/ESXi and vCenter Server. |
| VirtualMachine Power User | A set ofprivileges to allow the user to interact with and make hardware changes tovirtual machines, as well as perform snapshot operations.Privileges granted include:■All privileges for the scheduled task privileges group.■Selected privileges for global items, datastore, and virtual machineprivileges groups.■No privileges for folder, datacenter, network, host, resource, alarms,sessions, performance, and permissions privileges groups.Usually granted on a folder that contains virtual machines or on individualvirtual machines.Available on vCenter Server. |
| Virtual Machine User | Aset of privileges to allow the user to interact with a virtual machine’sconsole, insert media, and perform power operations. Does not grantprivileges to make virtual hardware changes to the virtual machine.Privileges granted include:■All privileges for the scheduled tasks privileges group.■Selected privileges for the global items and virtual machine privilegesgroups.■No privileges for the folder, datacenter, datastore, network, host,resource, alarms, sessions, performance, and permissions privilegesgroups.Usually granted on a folder that contains virtual machines or on individualvirtual machines.Available on vCenter Server. |
| Resource Pool Administrator | Aset of privileges to allow the user to create child resource pools and modifythe configuration of the children, but not to modify the resourceconfiguration of the pool or cluster on which the role was granted. Alsoallows the user to grant permissions to child resource pools, and assignvirtual machines to the parent or child resource pools.Privileges granted include:■All privileges for folder, virtual machine, alarms, and scheduled taskprivileges groups.■Selected privileges for resource and permissions privileges groups.■No privileges for datacenter, network, host, sessions, or performanceprivileges groups.Additional privileges must be granted on virtual machines and datastores toallow provisioning of new virtual machines.Usually granted on a cluster or resource pool.Available on vCenter Server. |
| VMware Consolidated BackupUser | Usedby the VMware Consolidated Backup product. Do not modify.Available on vCenter Server. |