vSphere Data Protection: delegation?

[admin]

Hi.

I have successfully installed a vSphere Data Protection (appliance version 6.1.80-179).

It works perfectly when using full vCenter admin accounts.

But our vCenter is shared for several teams & companies clusters: that VDP appliance I installed is just for a specific datacenter, a specific ESX cluster, specific VMs etc...

I have fine tuned access rights for the clients so that they can manage their hosts & VMs, and not the other ones. That's fine.

The problem is that the "vSphere Data Protection" doesn't appear at all on the web client for those delegated users: there is no "vSphere Data Protection" link between "vCenter Orchestrator" and the "Administration" links on the left side, for those accounts.

Is it possible to delegate the VDP access to my clients without giving them full admin to the whole vCenter?

(I don't see any permission concerning VDP, nor any "privilege" ; note the VDP appliance itself is already inside the client cluster, meaning they already have full access to the appliance itself)

Thanks in advance for any clue! :smileyhappy:

[JCMorrissey]

Hi,

Take a look at pg 59 of the guide enclosed:

https://docs.google.com/viewer?a=v&q=cache:RNwmGZP_zNMJ:pubs.vmware.com/vsphere-51/topic/com.vmware.ICbase/PDF/vmware-data-protection-administration-guide-51.pdf+vmware+data+protection+administrator+guide&hl=en&gl=uk&pid=bl&srcid=ADGEESgK4J4G330dOKZW9VnMfNy-35fm5_pqhP6AAF16oZJuL039bEFPOPUiRg_S-cpAd2PGo38ZmjUOE-dRPFNxojldiJNSD0YFFH4Cc_U-46yPx-aMRchNLHWiE9_8trqubURCFqQz&sig=AHIEtbSt-igjaXyKy__FgZkXABRBfjegwg

It describes the permission set you can provide the users via vCenter. As such there is no "VDP"-specific permissions set for vCenter.

Many tx

[jjharrison81]

We have the same issue in our organization.

We have followed the delegation instructions on page 59 of the guide above, but the VDP still does not work.  VMWare support has told us (after a month-long case) that the only way it will work is if the user has Administrator level permissions to the vCenter server.

Not being able to delegate the VDP without granting administrator access at the vCenter level is unacceptable - has anyone else been able to get this to delegate successfully?