Updating vSphere permissions to add tagging and custom attributes.

This came up from this issue: https://github.com/rancher/rancher/issues/37440.

It seems we have some capabilities in the UI that require these additional permissions. Our UI doesn't indicate they aren't configured, it just greys out the fields.
This commit is contained in:
Jamie Phillips
2022-04-25 10:38:31 -04:00
parent af26bd9d37
commit 46c149930d
@@ -10,9 +10,11 @@ The following table lists the permissions required for the vSphere user account:
| Privilege Group | Operations |
|:----------------------|:-----------------------------------------------------------------------|
| Datastore | AllocateSpace </br> Browse </br> FileManagement (Low level file operations) </br> UpdateVirtualMachineFiles </br> UpdateVirtualMachineMetadata |
| Global | Set custom attribute |
| Network | Assign |
| Resource | AssignVMToPool |
| Virtual Machine | Config (All) </br> GuestOperations (All) </br> Interact (All) </br> Inventory (All) </br> Provisioning (All) |
| vSphere Tagging | Assign or Unassign vSphere Tag </br> Assign or Unassign vSphere Tag on Object |
The following steps create a role with the required privileges and then assign it to a new user in the vSphere console: