When I add permissions at the data center level with the propagate option, I see the account in the permissions list on the individual servers but the privileges aren't taking effect. The privileges only work when I add the account explicitly to the esxi server.

For example:

  • My Datacenter (permissions: MyAccount:Administrator w/ Propagate)
    • My Cluster
      • My Server 1 (permissions: MyAccount:Administrator (inherited))

The privileges for administrator are not in effect for user MyAccount on My Server 1. However the privileges do take effect when the account is explicitly put on My Server 1 in this configuration:

  • My Datacenter
    • My Cluster
      • My Server 1 (permissions: MyAccount:Administrator (explicit))

Any idea why privileges aren't taking effect for the inherited permission?

  • We have a similar problem at the moment with 5.5. A service account has read-only on everything (granted on the vCenter itself) except one VM folder. There, the user has no access with propagation. (The user shouldn't see the VMs in this folder because we use it as "trash".) However, the user does see the VMs in this folder. We're still working on this issue. I'll let you know if we find something. – Mario Lenz Jan 16 '15 at 18:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.