Set global permissions via powercli? - vCenter 6

[mark_chuman]

Anyone know if this is possible?  Thanks.

[LucD]

The following set a permission on the rootfolder.

Is that what you mean by "global permission"?

$entity = Get-Folder -NoRecursion

$user = '[e-mail]'

$role = Get-VIRole -Name Administrator

New-VIPermission -Entity $entity -Principal $user -Role $role -Propagate:$true -Confirm:$false

[mark_chuman]

Thanks Luc.  I'm referring to this:

-     Login to web client with [e-mail]

-     Go to administration, access control, global permissions, manage.

-     If I add a user here with readonly role for example.  That permission entry gets added to all vCenter servers.

I can loop through all the VCs with new-vipermission, but wanted to see if there was powercli commandlets to mimic adding global permissions through the gui.

[LucD]

There is a SSO SDK, but I have to admit I never tried that.

There is also the ssowrench utility in the VCSA, see William's How to Add/Remove vCenter SSO Identity Sources Using the Command-Line for Windows vCenter Server & VCSA post.

[mark_chuman]

Thanks, I'll take a look.

[sathiyavd]

Did someone got a solution for this...looking for command to set global permission via powercli

[wreedps]

I am looking for a solution also. We are trying to export Global Permissions from one vCenter to another. Luckily its not so much, I can just do it by hand.