| Category |
|---|
The purpose of this document is to list the minimal permissions required for VMware host credentials (browse credentials) that are provided for operations in Protect.
| Description |
|---|
Required Roles
These permissions are set within vSphere.
At the vCenter level (if used):
A role is needed with at least *Global->Licenses checked at the root level (vCenter level) to be able to see the license.Otherwise one role that matches the ESX host level below at all levels.
At the ESX host level: (propagated to all sub levels)
Make sure the permissions listed are checked
*Global->Licenses
*Datastore->Browse
*Global->Licenses
*Resource->Assign Virtual machine to resource pool
*Virtual Machine->Interaction->Acquire quest control ticket
*Virtual Machine->Interaction->Device Connection
*Virtual Machine->Interaction->Power Off
*Virtual Machine->Interaction->Power On
*Virtual Machine->Provisioning->Allow disk access
*Virtual Machine->Provisioning->Mark as template
*Virtual Machine->Provisioning->Mark as virtual machine
*Virtual Machine->State->Create snapshot
*Virtual Machine->State->Remove snapshot
| Additional Information |
|---|
Some additional information worth noting:
-Protect needs to connect to the vCenter server to be abel to patch VM templates.
-VMware tools must be installed on VMs and VM templates.
-It is required to provide a local administrator account for the target system set in the machine group (to deploy to offline VMs).
Virtual Machine Template Patching Requirements & Informational Document
Patching process of a virtual infrastructure
| Affected Products |
|---|
Shavlik Protect 9.x
vCenter Protect 8.x