How do I identify effective permissions for a user in vCenter?

[vmproteau]

Many organizations don't have a defined protocol for adding permissions to vCenter. It often ends up being a convuluted web of explicit user and group permissions added at various levels of  vCenter. This can make it difficult to troubleshoot suspected permission related issues.

Is there a way to determine a particular user's effective rights to the environment? With just a user name, I'd like to be able to determine what permissions he has been grantedth across the vCenter permissions hierarchy.

[Troy_Clavell]

without scripts you can use the roles.  By highlighting each role you will be able to determine who has what, where.

From your home screen of vCenter click on the Roles Icon

[vmproteau]

Thanks. I am aware of that method however, with an abundance of AD domains and groups I was hoping there was a way to identify a specific user's permssions. I'll look into some scripting possibilites.