# Data Object - Permission(vim.AuthorizationManager.Permission)

Property of
  HostEnableAdminFailedEvent, HostSecuritySpec, ManagedEntity
Parameter to
  ResetEntityPermissions, SetEntityPermissions
Returned by
  RetrieveAllPermissions, RetrieveEntityPermissions, RetrieveRolePermissions
Extends
  DynamicData
See also
  ManagedEntity

## Data Object Description

This data object type provides assignment of some role access to a principal on a specific entity. A ManagedEntity is limited to one permission per principal.

Properties

Name | Type | Description
--- | --- | ---
entity* | ManagedObjectReference to a ManagedEntity | Managed entity the permission is defined on. Left unset when calling setPermissions or resetPermissions, but present for the results of permission queries.
group | xsd:boolean | Whether principal refers to a user or a group. True for a group and false for a user.
principal | xsd:string | User or group receiving access in the form of "login" for local or "DOMAIN\login" for users in a Windows domain.
propagate | xsd:boolean | Whether or not this permission propagates down the hierarchy to sub-entities.
roleId | xsd:int | Reference to the role providing the access.
Properties inherited from DynamicData
None

*Need not be set
Show WSDL type definition
<complexType xmlns="http://www.w3.org/2001/XMLSchema" xmlns:vsan="urn:vsan" name="Permission"> <complexContent> <extension base="vsan:DynamicData"> <sequence> <element name="entity" type="vsan:ManagedObjectReference" minOccurs="0"/> <element name="principal" type="xsd:string"/> <element name="group" type="xsd:boolean"/> <element name="roleId" type="xsd:int"/> <element name="propagate" type="xsd:boolean"/> </sequence> </extension> </complexContent> </complexType>