Permissions to Create VMs

[ToTheCloud]

Hello,

I am trying to give a specific group access to create VMs in a particular folder, which is inside of a datacenter.

VCenterServer

--Datacenter

---Folder A

---Folder B <- Give the group access to create VMs in here

---Folder C

I have created a new Role called VM Creators, and assigned them to Folder B, but they are not able to create VMs (I have checked every role to make sure that permissions are not an issue in this test case).

When logging into an account with the permissions the "Create New Virtual Machine" wizard fires up, but once I get to the "Host / Cluster" step, all I see is my Datacenter.  At this point, I am not allowed to click on the Next > button because the user group does not have direct permission to the physical machine itself.

I do NOT want the group I am creating to have direct access to a host/be able to login and configure VMs that aren't theirs, so is there anyway to get around this issue?

I am running vClient/Server v5.

Thanks in advance for any ideas!

ToTheCloud

[weinstein5]

Welcome to the Community - Are the hosts under the folder as well? Because if not you will need to assign a Create VM permission on the hosts as well -

Also I have moved this thread to a more approroiate forum

[ToTheCloud]

The current setup is just like my diagram above.  I would like to assign permissions for corresponding groups from AD to create VMs in a particular folder.

I do not want to assign the groups directly to the VM hosts as I don't want them to be able to modify other VMs they do not own (via logging into a host directly).

Thanks for the follow up!

ToTheCloud

[sa2057]

Hi,

Pl. check this blog...

http://vmtrooper.com/?p=23

Hope this helps

Thanks

SA

[ToTheCloud]

Thanks sa2057!

This should let me know what I want.  Seems like a giant hack though tbh.

@VMware, you should look into a solution to allow users to assign permissions specifically to certain objects to prevent having to set permissions at the vServer level.