I would have thought this is fairly simple, but I would like to give people rights to manage all the VM's in a resource pool. If I do what seem logical and create a role (with all the permission minus snapshots which we won't give them) and then assign this to the resource pool, the user can manage the VM's to a degree, but cannot create any.
No problem, I can create another folder in the virtual machines and templates view, and grant the account rights over that folder. The user now has a folder to create VM's in.
The problem now, is that they cannot assign an ISO to the VM's which is pretty useless. I found this Cannot mount ISO files because Browse Datastore is disabled, but when I follow this, the users can then see ALL the VM's and hosts in the datacentre. I suppose I could do it at a lower level (the isoimages datastore), except that I cannot find anyway of doing this.
What am I doing wrong here? Is there a way to get a user to have the rights to create, restart, modify, VM's within a particular resource pool, without providing visibility of the entire infrastructure?
Thanks
-----UPDATE----
This VC is running on 2.5.0, build 64192.
Thanks again.
