Site Recovery Manager includes a set of roles. Each role includes a set of privileges, which enable users with those roles to complete different actions.

Roles can have overlapping sets of privileges and actions. For example, the Site Recovery Manager Administrator role and the Site Recovery Manager Protection Groups Administrator have the Create privilege for protection groups. With this privilege, the user can complete one aspect of the set of tasks that make up the management of protection groups.

Assign roles to users on Site Recovery Manager objects consistently on both sites, so that protected and recovery objects have identical permissions.

All users must have at least the System.Read privilege on the root folders of vCenter Server and the Site Recovery Manager root nodes on both sites.

Note

If you uninstall Site Recovery Manager Server, Site Recovery Manager removes the default Site Recovery Manager roles but the Site Recovery Manager privileges remain. You can still see and assign Site Recovery Manager privileges on other roles after uninstalling Site Recovery Manager. This is standard vCenter Server behavior. Privileges are not removed when you unregister an extension from vCenter Server.

Site Recovery Manager Roles

Role

Privilege

Action

Target Object in vCenter Server Inventory

Site Recovery Manager Administrator

Site Recovery Manager.Advanced Settings.Modify

Site Recovery Manager.Array Manager.Configure

Site Recovery Manager.Diagnostics.Export

Site Recovery Manager.Inventory Preferences.Modify

Site Recovery Manager.Placeholder Datastores.Configure

Site Recovery Manager.Protection Group.Assign to Plan

Site Recovery Manager.Protection Group.Create

Site Recovery Manager.Protection Group.Modify

Site Recovery Manager.Protection Group.Remove

Site Recovery Manager.Protection Group.Remove from Plan

Site Recovery Manager.Recovery History .View Deleted

Site Recovery Manager.Recovery History .Plans

Site Recovery Manager.Recovery Plan.Configure

Site Recovery Manager.Recovery Plan.Configure commands

Site Recovery Manager.Recovery Plan.Create

Site Recovery Manager.Recovery Plan.Modify

Site Recovery Manager.Recovery Plan.Remove

Site Recovery Manager.Recovery Plan.Reprotect

Site Recovery Manager.Recovery Plan.Test

Site Recovery Manager.Remote Site.Modify

Datastore.Replication.Protect

Datastore.Replication.Unprotect

Resource.Recovery Use

Virtual Machine. Replication.Protect

Virtual Machine. Replication.Stop

Configure advanced settings.

Configure connections.

Configure inventory preferences.

Configure placeholder datastores.

Configure array managers.

Manage protection groups.

Manage recovery plans.

Protect virtual machines.

Edit protection groups.

Remove protection groups.

Virtual machine

Datastore

vCenter Server folder

Resource pool

Network

Site Recovery Manager service instance

Site Recovery Manager folder

Protection group

Recovery plan

Array manager

Site Recovery Manager Protection Groups Administrator

Site Recovery Manager.Protection Group.Create

Site Recovery Manager.Protection Group.Modify

Site Recovery Manager.Protection Group.Remove

Datastore.Replication.Protect

Datastore.Replication.Unprotect

Resource.Recovery Use

Virtual Machine. Replication.Stop

Manage protection groups.

Protect virtual machines.

Site Recovery Manager folder

Protection group

Site Recovery Manager Recovery Administrator

Site Recovery Manager.Protection Group.Remove from plan

Site Recovery Manager.Recovery Plan.Modify

Site Recovery Manager.Recovery Plan.Test

Site Recovery Manager.Recovery Plan.Recovery

Site Recovery Manager.Recovery Plan.Reprotect

Site Recovery Manager.Recovery Plan.Configure commands

Site Recovery Manager.Recovery History.View deleted plans

Manage recovery.

Test recovery.

Protection group

Recovery plan

Site Recovery Manager service instance

Site Recovery Manager Recovery Plans Administrator

Site Recovery Manager.Protection Group.Assign to plan

Site Recovery Manager.Protection Group.Remove from plan

Site Recovery Manager.Recovery Plan.Configure

Site Recovery Manager.Recovery Plan.Commands

Site Recovery Manager.Recovery Plan.Create

Site Recovery Manager.Recovery Plan.Modify

Site Recovery Manager.Recovery Plan.Remove

Site Recovery Manager.Recovery Plan.Test

Resource.Recovery Use

Manage recovery plans.

Add protection groups to recovery plans.

Test recovery plans.

Cancel recovery plan test.

Edit virtual machine recovery properties.

Protection group

Recovery plan

vCenter Server folder

Datastore

Resource pool

Network

Site Recovery Manager Test Administrator

Site Recovery Manager.Recovery Plan.Modify

Site Recovery Manager.Recovery Plan.Test

Test recovery plans.

Cancel recovery plans test.

Edit virtual machine recovery properties.

Recovery plan