戻る
-
タイトル
Rapid recovery ESXi 6 | 6.5 | 6.7 | 7 | 8 permissions -
説明
If you want to create a specific user for VMware with limited permissions to perform necessary tasks within Rapid Recovery, these are the permissions needed. This list is specific to ESXi versions 6, 6.5, 6.7, 7, and 8. These permissions will allow you authenticate, pull inventory, backup and restore within an ESXi environment. -
対策
Create a tailored role with the following permissions in VMware:
Datastore
- Allocate space
- Browse datastore
- Low level file operations
- Remove file
Global
- Licenses
- Log event
-
DisableMethods
-
EnableMethods
Host\Inventory
- Modify cluster
Host\Local Operations
- Create virtual machine
- Reconfigure virtual machine
Network
- Assign network
- Configure
Resource
- Assign vApp to resource pool
- Assign virtual machine to resource pool
vApp
- Add virtual machine
- Assign resource pool
- Create
- Delete
- Import
- Move
- Power off
- Power On
- Rename
Virtual machine\ Change Configuration
- <Select All>
Virtual Machine\Interaction
- Configure CD media
- Configure floppy media
- Console interaction
- Connect devices
- Power Off
- Power On
- Install VMware Tools
Virtual Machine\Edit Inventory
- Create new
- Remove
Virtual Machine\Provisioning
- Allow disk access
- Allow read-only disk access
- Allow virtual machine download
- Allow virtual machine files upload
- Clone template
Virtual Machine\Service Configuration
- Modify service configuration
Virtual Machine\Snapshot Management
- <Select All>
If a policy will be used to create an Export of an encrypted virtual machine, please also add all Cryptographic Operations permissions to the service account.