Permissions required for access to virtual machine Web Console?

[Tryade]

Hello,

I've recently begun setting up custom roles for user access to vCenter (7.0U3j) for different user roles, but without granting "full administrator" permissions, I'm unable to get the virtual machine Web Console working (it's greyed out).

For these kinds of roles, I've added the "Virtual Machine -> Interaction -> Console Interaction" permission, which grants access to the Remote Console, but for some unknown reason, not the Web Console.

Does anyone know if there is a different permission that's needed in order to gain access to the Web Console?
I've been unable to find this out on my own, and haven't been able to find any documentation about it.

[Lalegre]

,

Actually, that is the only permission you need for both consoles. Where are you applying that permission? To which object?

[Tryade]

,

Thank you for replying.

I forgot to mention that, and probably a few other things as well, but that permission has been applied to the virtual machines (via VM Folders with propagation).
I've also tried applying this role to the datacenter, cluster, hosts and vCenter server itself, without any luck.

[Tryade]

,

Now I feel really stupid...please disregard everything I've said and consider this resolved.
The problem was that I was only testing this on powered off VM's (duh!), off course it worked as expected on powered on VM's