Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would have thought this is fairly simple, but I would like to give people rights to manage all the VM's in a resource pool. If I do what seem logical and create a role (with all the permission minus snapshots which we won't give them) and then assign this to the resource pool, the user can manage the VM's to a degree, but cannot create any.

No problem, I can create another folder in the virtual machines and templates view, and grant the account rights over that folder. The user now has a folder to create VM's in.

The problem now, is that they cannot assign an ISO to the VM's which is pretty useless. I found this Cannot mount ISO files because Browse Datastore is disabled, but when I follow this, the users can then see ALL the VM's and hosts in the datacentre. I suppose I could do it at a lower level (the isoimages datastore), except that I cannot find anyway of doing this.

What am I doing wrong here? Is there a way to get a user to have the rights to create, restart, modify, VM's within a particular resource pool, without providing visibility of the entire infrastructure?



This VC is running on 2.5.0, build 64192.

Thanks again.

share|improve this question
Can you let us know which version of VC you're running? – Chopper3 Jan 19 '10 at 18:39
I've added information. Thanks. –  gheywood Jan 20 '10 at 9:15
damn, all my VCs are on v4 now sorry, otherwise I'd have dug around for you. I might be able to quickly restore a previous 2.5 version, if so I'll let you know ok. – Chopper3 Jan 20 '10 at 9:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.