Predefined roles packaged with SnapCenter Plug-in for VMware vSphere

To simplify working with vCenter Server RBAC, SnapCenter Plug-in for VMware vSphere provides a set of predefined SnapCenter roles that enable users to perform SnapCenter tasks. There is also a read-only role that allows users to view SnapCenter information, but not perform any tasks.

The predefined Plug-in for VMware vSphere roles have both the required SnapCenter-specific privileges and the native vCenter Server privileges to ensure that tasks complete correctly. In addition, the roles are set up to have the necessary privileges across all supported versions of vCenter Server.

As an administrator, you can assign these roles to the appropriate users.

Note: The Plug-in for VMware vSphere returns these roles to their default values (initial set of privileges) each time you restart the vCenter web client service or modify your installation. If you upgrade the Plug-in for VMware vSphere, the predefined roles are automatically upgraded to work with that version of the plug-in.

You can see the predefined roles in the vCenter GUI by clicking > Administration > Roles.

Role Description
SCV Administrator Provides all native vCenter Server and SnapCenter-specific privileges necessary to perform all Plug-in for VMware vSphere tasks.
SCV View Provides read-only access to all of the Plug-in for VMware vSphere backups, resource groups, and policies.
SCV Backup Provides all native vCenter Server and SnapCenter-specific privileges necessary to back up vSphere objects (virtual machines and datastores).

The user also has access to the configure privilege.

The user cannot restore from backups.

SCV Restore Provides all native vCenter Server and SnapCenter-specific privileges necessary to restore vSphere objects that have been backed up using the Plug-in for VMware vSphere and to restore guest files and folders.

The user also has access to the configure privilege.

The user cannot back up vSphere objects.

SCV Guest File Restore Provides all native vCenter Server and SnapCenter-specific privileges necessary to restore guest files and folders. The user cannot restore VMs or VMDKs.