Loading

×Sorry to interrupt
This page has an error. You might just need to refresh it.
[NoErrorObjectAvailable] Uncaught ReferenceError: addCTracking is not defined
Failing descriptor: {markup://c:KM_ArticleThemeLayout}

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

[VMC on AWS] How to use 'Containerized Permissions' (76182)

Last Updated: 1/7/2020Categories: How toTotal Views: 4619Language:
English

Subscribe to get an email
newsletter with new updates

Please provide article feedback:

Symptoms

Creating a custom role for VMware Cloud on AWS once 'Containerized Permissions' has been enabled.

Purpose

To provide the steps to create and apply custom roles in VMware Cloud on AWS.

Impact / Risks

This is for VMware Cloud on AWS SDDCs that are at version 1.7 or newer.

Resolution

To create a custom role, follow the below process:

Log in to the VMware Cloud on AWS vCenter using [email-masked]' or a user with the CloudAdmin role.

Navigate to the "Roles" section. (Menu -> Administration -> Access Control -> Roles)

Select the role that needs to be cloned and click the "Clone role action" icon. For example, an administrator can clone the "CloudAdmin" role and remove privileges as needed. Note: Do not clone the "Administrator" role. This role cannot be used and the custom role created cannot be deleted by [email-masked]'

Type the name needed for the cloned role.

Add or remove privileges for the role. Once done, click "OK"

The clone role should now be visible in the "Roles" list.

To use the newly created custom role, follow the below process:

Navigate to the object that requires the added permission. For example, to apply the permission to a folder, navigate to "Menu -> VMs and Templates -> FolderName"

Right click the object and select "Add Permission"

In the "Add Permission" window, select the Identity Source in the "User" drop-down where the group or user can be found.

Search for the user or group after selecting the Identity Source under the "User" section. If the user or group cannot be found, please verify the Identity Source is correct.

Select the role that will be applied for the user or group.

Check the "Propagate to children" if needed.

Click "OK".

The newly added permission will now show in the "Permissions" section for the object.

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
English

Attachments

Additional Resources

KB
•
RealVNC Viewer を使用して複数の 4K ディスプレイで仮想マシンを実行すると、プロセスがメモリ不足エラーで失敗する (76793)

KB
•
Skyline Log Assist のトラブルシューティング (78957)

KB
•
将vCenter Server 5.5 升级/迁移到 6.x 期间出现“错误: 正在尝试备份 SPBM 数据，请查看 invsvc 日志了解详细信息 (Error: Attempting to backup SPBM data, please check the invsvc logs for details)” (70893)

Results 1-3 of 3

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware Cloud on AWS

Related Versions:

Take Our Survey

Support Assistant