From 46c149930d71d0cd279516b828e02959f1912b95 Mon Sep 17 00:00:00 2001
From: Jamie Phillips <jamie.phillips@suse.com>
Date: Mon, 25 Apr 2022 10:36:55 -0400
Subject: [PATCH] Updating vSphere permissions to add tagging and custom
 attributes.

This came up from this issue: https://github.com/rancher/rancher/issues/37440.

It seems we have some capabilities in the UI that require these additional permissions. Our UI doesn't indicate they aren't configured, it just greys out the fields.
---
 .../node-pools/vsphere/creating-credentials/_index.md           | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/rancher/v2.6/en/cluster-provisioning/rke-clusters/node-pools/vsphere/creating-credentials/_index.md b/content/rancher/v2.6/en/cluster-provisioning/rke-clusters/node-pools/vsphere/creating-credentials/_index.md
index 6f83c84c66c..55ac548274e 100644
--- a/content/rancher/v2.6/en/cluster-provisioning/rke-clusters/node-pools/vsphere/creating-credentials/_index.md
+++ b/content/rancher/v2.6/en/cluster-provisioning/rke-clusters/node-pools/vsphere/creating-credentials/_index.md
@@ -10,9 +10,11 @@ The following table lists the permissions required for the vSphere user account:
 | Privilege Group       | Operations  |
 |:----------------------|:-----------------------------------------------------------------------|
 | Datastore             | AllocateSpace </br> Browse </br> FileManagement (Low level file operations) </br> UpdateVirtualMachineFiles </br> UpdateVirtualMachineMetadata |
+| Global                | Set custom attribute |
 | Network               | Assign |
 | Resource              | AssignVMToPool |
 | Virtual Machine       | Config (All) </br> GuestOperations (All) </br> Interact (All) </br> Inventory (All) </br> Provisioning (All) |
+| vSphere Tagging       | Assign or Unassign vSphere Tag </br> Assign or Unassign vSphere Tag on Object |
 
 The following steps create a role with the required privileges and then assign it to a new user in the vSphere console: