Many tasks require permissions on more than one object in the inventory. You can review the privileges required to perform the tasks and, where applicable, the appropriate sample roles.

The following table lists common tasks that require more than one privilege. You can use the Applicable Roles on the inventory objects to grant permission to perform these tasks, or you can create your own roles with the equivalent required privileges.

Required Privileges for Common Tasks

Task

Required Privileges

Applicable Role

Create a virtual machine

On the destination folder or datacenter:

Virtual machine.Inventory.Create new

Virtual Machine.Configuration.Add New Disk (if creating a new virtual disk)

Virtual Machine .Configuration.Add Existing Disk (if using an existing virtual disk)

Virtual Machine.Configuration.Raw Device (if using a RDM or SCSI pass-through device)

Virtual Machine Administrator

On the destination host, cluster, or resource pool:

Resource.Assign Virtual Machine to Resource Pool

Virtual Machine Administrator

On the destination datastore or folder containing a datastore:

Datastore.Allocate Space

Datastore Consumer or Virtual Machine Administrator

On the network that the virtual machine will be assigned to:

Network.Assign Network

Network Consumer or Virtual Machine Administrator

Deploy a virtual machine from a template

On the destination folder or datacenter:

Virtual machine .Inventory.Create from existing

Virtual Machine .Configuration.Add Add New Disk

Virtual Machine Administrator

On a template or folder of templates:

Virtual Machine.Provisioning.Deploy Template

Virtual Machine Administrator

On the destination host, cluster or resource pool:

Resource.Assign Virtual.Machine to Resource Pool

Virtual Machine Administrator

On the destination datastore or folder of datastores:

Datastore.Allocate Spaces

Datastore Consumer or Virtual Machine Administrator

On the network that the virtual machine will be assigned to:

Network.Assign Network

Network Consumer or Virtual Machine Administrator

Take a virtual machine snapshot

On the virtual machine or a folder of virtual machines:

Virtual Machine.State.Create Snapshots

Virtual Machine Power User or Virtual Machine Administrator

On the destination datastore or folder of datastores:

Datastore.Allocate Space

Datastore Consumer or Virtual Machine Administrator

Move a virtual machine into a resource pool

On the virtual machine or folder of virtual machines:

Resource.Assign Virtual Machine to Resource Pool

Virtual Machine.Inventory

Move

Virtual Machine Administrator

On the destination resource pool:

Resource.Assign Virtual Machine to Resource Pools

Virtual Machine Administrator

Install a guest operating system on a virtual machine

On the virtual machine or folder of virtual machines:

Virtual Machine.Interaction.Answer Question

Virtual Machine.Interaction.Console Interaction

Virtual Machine.Interaction.Device Connection

Virtual Machine.Interaction.Power Offs

Virtual Machine.Interaction.Power On

Virtual Machine.Interaction.Reset

Virtual Machine.Interaction.Configure CD Media (if installing from a CD)

Virtual Machine.Interaction.Configure Floppy Media (if installing from a floppy disk)

Virtual Machine.Interaction.Tools Install

Virtual Machine Power User or Virtual Machine Administrator

On a datastore containing the installation media ISO image:

Datastore.Browse Datastore (if installing from an ISO image on a datastore)

Virtual Machine Power User or Virtual Machine Administrator

Migrate a virtual machine with vMotion

On the virtual machine or folder of virtual machines:

Resource.Migrate

Resource.Assign Virtual Machine to Resource Pool (if destination is a different resource pool from the source)

Datacenter Administrator or Resource Pool Administrator or Virtual Machine Administrator

On the destination host, cluster, or resource pool (if different from the source):

Resource.Assign Virtual Machine to Resource Pool

Datacenter Administrator or Resource Pool Administrator or Virtual Machine Administrator

Cold migrate (relocate) a virtual machine

On the virtual machine or folder of virtual machines:

Resource.Relocate

Resource.Assign Virtual Machine to Resource Pool (if destination is a different resource pool from the source)

Datacenter Administrator or Resource Pool Administrator or Virtual Machine Administrator

On the destination host, cluster, or resource pool (if different from the source):

Resource.Assign Virtual Machine to Resource Pool

Datacenter Administrator or Resource Pool Administrator or Virtual Machine Administrator

On the destination datastore (if different from the source):

Datastore.Allocate Space

Datastore Consumer or Virtual Machine Administrator

Migrate a Virtual Machine with Storage vMotion

On the virtual machine or folder of virtual machines:

Resource.Migrate

Datacenter Administrator or Resource Pool Administrator or Virtual Machine Administrator

On the destination datastore:

Datastore.Allocate Space

Datastore Consumer or Virtual Machine Administrator

Move a host into a cluster

On the host:

Host.Inventory.Add Host to Cluster

Datacenter Administrator or Virtual Machine Administrator

On the destination cluster:

Host.Inventory.Add Host to Cluster

Datacenter Administrator or Virtual Machine Administrator