vSphere Plugin: Minimum Permissions Matrix for Everpure vSphere RBAC

FlashArray Management

Add FlashArray to vCenter

User must be in the administrators@vsphere.local (or equivalent SSO) domain.

Edit Existing FlashArray

• Administration
  • Display Array
  • Edit Array

Remove FlashArray from vCenter

• Administration
  • Display Array
  • Remove Array

Modify FlashArray Roles

Applies to existing FlashArray permissions only. That is, cannot add a new permission to a FlashArray. That capability is reserved for users in the Administrators@vsphere.local group.

• Administration
  • Display Array
  • Modify Roles

ESXi Host Management

Add Host Group to FlashArray

Note that for iSCSI-based arrays the configure ESXi Host iSCSI permission listed below will also be required if software iSCSI has not been enabled on the ESXi hosts.

• Administration
  • Display Array
• Host Management
  • Add Array Host Group

Rename Host

• Administration
  • Display Array
• Host Management
  • Rename Host

Disconnect Host from FlashArray Host Group

Host

• Configuration
  • Maintenance

Everpure

• Administration
  • Display Array
• Host Management
  • Disconnect Host

Configure ESXi Host iSCSI

Host

• Configuration
  • Storage partition configuration

Everpure

• Administration
  • Display Array
• Miscellaneous
  • Configure iSCSI

Protection Groups

Import Protection Groups

Everpure

• Administration
  • Display Array
• Virtual Volume Management
  • Import Protection Groups

Profile-driven storage

• Profile-driven storage update
• Profile-driven storage view

Snapshot Management

Create Snapshot

• Snapshot Management
  • Create Snapshot

Copy Snapshot

Datastore

• Configure datastore
• Low level file operations
• Rename datastore

Host

• Configuration
  • Storage partition configuration

Everpure

• Administration
  • Display Array
• Snapshot Management
  • Copy Snapshot
• Volume Management
  • Create VMFS Datastore
  • Mount Datastore

Restore Snapshot

Everpure

• Snapshot Management
  • Restore Snapshot

Delete Snapshot

• Snapshot Management
  • Delete Snapshot

VMFS Management

Create VMFS Datastore

Host

• Configuration
  • Storage partition configuration

Everpure

• Administration
  • Display Array
• Volume Management
  • Create VMFS Datastore
  • Mount Datastore

Edit VMFS Datastore

Host

• Configuration
  • Storage partition configuration

Everpure

• Administration
  • Display Array
• Volume Management
  • Edit Datastore

Run and Schedule Space Reclamation

Host

• Configuration
  • Storage partition configuration

Everpure

• Administration
  • Display Array
• Volume Management
  • Run Space Reclamation
  • Schedule Space Reclamation

Destroy VMFS Datastore

Host

• Configuration
  • Storage partition configuration

Everpure

• Administration
  • Display Array
• Volume Management
  • Delete Datastore
  • Unmount Datastore

vVols Management

Register Storage Provider

Host

• Configuration
  • Storage partition configuration

Everpure

• Administration
  • Display Array
• Virtual Volume Management
  • Create vVol Datastore

Storage views

• Configure service
• View

Create vVols Datastore

Host

• Configuration
  • Storage partition configuration

Everpure

• Administration
  • Display Array
• Virtual Volume Management
  • Create vVol Datastore

Storage views

• Configure service
• View

Unmount vVols Datastore

Host

• Configuration
  • Storage partition configuration

Everpure

• Administration
  • Display Array
• Volume Management
  • Unmount Datastore

Storage views

• Configure service
• View

Create Virtual Disk

Datastore

• Allocate space

Host

• Local operations
  • Reconfigure virtual machine

Everpure

• Administration
  • Display Array
• Virtual Volume Management
  • Create Virtual Disk

Virtual machine

• Change Configuration
  • Add new disk

Create a Virtual Volume

Virtual machine

• Change Configuration
  • Add new disk

Overwrite a Virtual Volume

• Virtual Volume Management
  • Replace a Virtual Volume

Restore Deleted Virtual Volume

Datastore

• Browse datastore
• Configure datastore
• Low level file operations

Host

• Local operations
  • Reconfigure virtual machine

Everpure

• Administration
  • Display Array
• Virtual Volume Management
  • Restore Deleted Virtual Volume

Virtual machine

• Change Configuration
  • Add existing disk
  • Change Settings

Snapshot Virtual Volume

Everpure

• Virtual Volume Management
  • Snapshot Virtual Volume

Undelete vVols VM

Datastore

• Allocate space
• Browse datastore
• Configure datastore
• Low level file operations

Host

• Local operations
  • Create virtual machine
  • Reconfigure virtual machine

Everpure

• Virtual Volume Management
  • Undelete vVols VM

Resource

• Assign virtual machine to resource pool

Profile-driven storage

• Profile-driven storage update
• Profile-driven storage view

Virtual machine

• Change Configuration
  • Add existing disk
  • Advanced configuration
  • Change Settings
  • Modify device settings
  • Toggle disk change tracking
• Edit Inventory
  • Create from existing
  • Create new
  • Register
• Interaction
  • Connect devices
• Provisioning
  • Allow disk access
  • Mark as virtual machine
• Snapshot management
  • Create snapshot
  • Remove snapshot
  • Revert to snapshot

Remove hard disk

Host

• Local operations
  • Reconfigure virtual machine

Virtual machine

• Change Configuration
  • Remove disk