export all vm-folder with groups and there members

[the1960]

Does anyone know a script that can read all VM folders with their authorized groups and the users they contain?

[Andrea Consalvi]

Yes, you can do this via PowerCLI by iterating over each VM folder and checking permissions using Get-VIPermission. Here's a basic example that exports VM folders, assigned groups/users, and their roles:

Connect-VIServer your-vcenter
$report = @()
Get-Folder -Type VM | ForEach-Object {
    $folder = $_
    $permissions = Get-VIPermission -Entity $folder
    foreach ($perm in $permissions) {
        $report += [PSCustomObject]@{
            FolderName = $folder.Name
            Principal  = $perm.Principal
            Role       = $perm.Role
            IsGroup    = $perm.Group
        }
    }
}
$report | Export-Csv -Path "VMFolderPermissions.csv" -NoTypeInformation

This will give you a CSV with all VM folders and their assigned users or groups, including their role and group status.

[the1960]

Hallo

Thanks for the feedback.

But Get-VIPermission no longer works under vSphere 8.0. It's mainly about resolving the local groups with the users under vsphere.local.

Beste Grüße
Tobias Heise

-------------------------------------------------------------------------
Universität Konstanz
Kommunikations-, Informations-, Medienzentrum (KIM)
Abteilung IT-Dienste Forschung, Lehre, Infrastruktur
Sachgebiet Datacenter
Gebäude V-409
78457 Konstanz, Germany
Tel: [phone]