Export CSV of vCenter inventory if user\group has the No Access role assigned.

[Matthew Ludlow]

Hello.

Is it possible to export a CSV list of every VM in the vCenter inventory that has one particular user\group set to the No Access role?

In my case we have a domain group set to the No Access role to block that VMs visibility to the Microsoft Azure Migrate discovery process.

I'd like to get a list of all those VMs.  RVTools doesn't seem to include this information.

We're using vSphere 7.0.3.01900

[Pawel Piotrowski]

You should be able to do that with Powercli, you can query the roles and their assignments 

I've made a script once to query all roles and thei assignments exporting to CSV/excel with an output similar to this:

(it's just a small piece of the output)

"on Datacenters" means the permission is assigned on the vCenter level, in case you have an assignment on a VM level you will get there a name of the VM/other object.