VMware VC-VLM4-C User Guide - Page 149

A Roles and Rights A vCenter Lab Manager applies roles and rights to determine which users and groups can perform which operations. See "Managing Users, Groups, and Roles" on page 109 for information on predefined roles, creating roles, and assigning rights to roles. See "Create an Organization" on page 27 for information on assigning roles to users and groups. In addition, when users share an object that they own (for example, a virtual machine template or configuration), they can specify a level of access rights. Access rights combine with the rights of a user's role to determine how a user can interact with shared objects. Access rights cannot provided users with rights that they do not already have based on their role. Predefined Roles This appendix includes information about the rights assigned to Lab Manager's predefined roles and how access rights affect users who work with shared objects. The Lab Manager predefined roles are:  System Administrator  Administrator The system administrator can assign the administrator role rights at the organization or workspace level.  Template Creator  Application Owner  User  View Only Datastore Rights By default, only system administrators can create, delete, and edit datastores. The create right is required to add a datastore to an organization. Other users can access datastores that are added to their organization as resources. Table A-1. Datastore Rights for Predefined Roles System Administrator Administrator Template Creator Application Owner User View Only Delete X Edit Properties X VMware, Inc. 149