A user in vCloud Air can either have administrator privileges or end user privileges, but not both. Administrator privileges are grouped into specific administrator roles. The individual acting as an administrator can be assigned multiple administrator roles.

Specialized administrator roles allow you to assign one or multiple individuals to perform these tasks.

Virtual infrastructure administrator

Virtual infrastructure administrators can add and modify virtual data centers in a Dedicated Cloud service. Virtual infrastructure administrators can manage virtual machines. They can also view gateways, networks, activity logs, and users.

Account administrator

Account administrators can add users and reset passwords. This role has the ability to create users with any and all administrator privileges. Account administrators can also view virtual data centers, virtual machines, gateways, networks, and activity logs. Account administrators can manage user accounts in My VMware and have permissions to file support requests.

Network administrator

Network administrators can manage networks and gateways. Network administrators can also view virtual data centers, virtual machines, activity logs, and users.

Read-only administrator

Read-only administrators can view but not alter settings in administration areas. Read-only administrators can view virtual data centers, virtual machines, gateways, networks, activity logs, and users.

End users create and manage virtual machines within virtual data centers to which they are assigned access. The end user role includes the following procedures.

Add virtual machines based on a template from VMware catalog and from My Catalog, your organization's custom templates.

Create a virtual machine in vCloud Director.

Power on, power off, reset, and suspend virtual machines in a virtual data center.

Use snapshots of virtual machines.

Delete virtual machines from the virtual data center.