Permission To Upload Files to Datastore

[stannum]

Author : Kristina Bliznashka

URL : http:////docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.html.hostclient.doc/GUID-139C3002-16FA-4519-B702-21315E39C55C.html

Topic Name : Upload Files to a Datastore in the VMware Host Client

Publication Name : vSphere Single Host Management - VMware Host Client

Product/Version : VMware vSphere/6.7

Question :

Hi, instructions describing file upload procedure on this topic: https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.html.hostclient.doc/ not working. I have created a Role with specified Privilege: "Datastore>Browse Datastore" and set it on one of the datastores for specific user and that user getting an error: "You have no privileges to view this object or it does not exist. " If I set "Administrator" Role instead of my created one I've got an error: "No suitable host found for file upload. You should have Host > Configuration > System Management privilege on the hosts connected to that datastore in order to upload files." How to properly set permissions for a specific user to allow him to upload ISO-images to datstores?

[bryanvaneeden]

Did you try adding the Datastore > Low level file operations as a test? Sometimes this helps. But yes you are correct. The browse datastore permission should be sufficient.

[RickVerstegen]

You have to enable the permission "Low level file operations".

On a datastore that contains the installation media ISO image:

Datastore > Browse datastore (if installing from an ISO image on a datastore)

On the datastore to which you upload the installation media ISO image:

Datastore > Browse datastore

Datastore > Low level file operations

[stannum]

Thank you: bryanvaneeden and RickVerstegen for you andwers.

I have performed more tests with Roles/Privileges and found following facts:

1. Datastore=>Browse Datastore Privilege is enough only for mounting ISO-images from specific Datastore if you have been set a Role with this Privilege on that Datastore for a User

2. Datastore=>Browse Datastore on Datastore + Configuration=>Host=>System Management at least on one Host that accessing that Datastore in case if you want to set permission to Upload files to Datastore. Pay attention to fact: User will not be able to delete files from datastore only able to upload.

          Note: This work only in HTML5-version of the client,if you using a FLEX-version, the buttons "Upload File(Folder)" will be grayed out, I think this is a BUG

3. Datastore=>[Browse Datastore,Low Level  File Operations] on Datastore + Configuration=>Host=>System Management at least on one Host that accessing that Datastore

          Note: Work with HTML5 and FLEX-client

Note: After creating a new Role or changing the permissions of a specific Role, you must delete cookies for your web client address, no matter what client you are using (HTML5 / FLEX), otherwise new permissions will not take effect.