Mastering VMware vSphere 6.5

Roles and permissions

Permissions specify the privileges (tasks a user can perform) an authenticated user or group has on a specific vCenter Server object and can be assigned on different levels of a hierarchy. For example, you can assign permissions to a cluster object or to a data center object. The best practice is to assign only needed permissions, to increase security and to have a clearer permissions structure. The use of folders to group objects based on specific permissions makes the vSphere administration simpler.

There are also global permissions that are applied to a global root object to grant the user or group privileges for all objects in all hierarchies. Use global permissions carefully, because you assign permissions to all ...