ForESXi, permissions are defined as access roles that consist of a user and the user’s assigned role for an object such as a virtual machine or ESXi host. Permissions grant users the right to perform the activities specified by the role on the object to which the role is assigned.

The vSphere Single Host Management document explains how you can perform permission validation and assign and remove permissions with the vSphere Client. This document discusses the different types of permissions.