Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

For one of my Server2k8 VMs on an ESXi host, I accidentally set all vSphere users/groups to read-only so all vSphere management options are disabled. We can log into the ESXi host as root and manage the VM but it does not show us the vSphere users so we can't change them from read-only back to administrator.

Are there any vSphere CLI options or other work arounds to fix this? Fortunately it's not in production yet so I could always blow it up.


share|improve this question

VMware describes the procedure for ESX and it's very similar for ESXi.

Enable SSH on the console and logon as root. Navigate to the /etc/vmware/hostd directory and edit authorization.xml. Look for the <ACEDataRoleId> entry for root (it'll be inside the same <ACEData> as an <ACEDataUser> set to root). Change the value in <ACEDataRoleId> to -1. Switch back to the menu on console 2 and restart the management agents.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.