Skip to main content
NetApp Disaster Recovery

Required vCenter privileges for NetApp Disaster Recovery

Contributors netapp-ahibbard amgrissino

For NetApp Disaster Recovery to perform its services, the vCenter account must have a minimum set of vCenter privileges. These privileges include registering and deregistering datastores, starting and stopping virtual machines (VMs), and reconfiguring VMs.

The following table lists all privileges required for Disaster Recovery to interface with a vCenter cluster.

Type Privilege name (vSphere client) Privilege name (API) Description

Datastore

Datastore.Config

Configure datastore

Permits configuring a datastore.

Datastore.Delete

Remove datastore

Permits removing a datastore.

Datastore.Rename

Rename datastore

Permits renaming a datastore.

Folder

Folder.Create

Create folder

Permits creating a new folder.

Folder.Delete

Delete folder

Permits deleting a folder. Requires privilege on both the object and its parent.

Folder.Rename

Rename folder

Permits modifying a folder name.

Network

Network.Assign

Assign network

Permits assigning a network to a VM.

Network.Config

Configure

Permits configuring a network.

Virtual machine configuration

VirtualMachine.Config.AdvancedConfig

Advanced configuration

Permits adding or modifying advanced parameters in the VM's configuration file.

VirtualMachine.Config.Settings

Change settings

Permits changing general VM settings.

VirtualMachine.Config.CPUCount

Change CPU count

Permits changing the number of virtual CPUs.

VirtualMachine.Config.Memory

Change memory

Permits changing the amount of memory allocated to the VM.

VirtualMachine.Config.Resource

Change resource

Permits changing the resource configuration of VM nodes in a resource pool.

VirtualMachine.Config.Rename

Rename

Permits renaming a VM or modifying its notes.

VirtualMachine.Config.EditDevice

Modify device settings

Permits changing an existing device's properties.

VirtualMachine.Config.ReloadFromPath

Reload from path

Permits changing a VM configuration path while preserving identity.

VirtualMachine.Config.ResetGuestInfo

Reset guest information

Permits editing the guest operating system information for a VM.

Virtual machine guest

VirtualMachine.GuestOperations.ModifyAliases

Guest operation alias modification

Permits modifying the alias for the VM.

VirtualMachine.GuestOperations.QueryAliases

Guest operation alias query

Permits querying a VM's alias.

VirtualMachine.GuestOperations.Modify

Guest operation modifications

Permits modification operations, including transferring a file to the VM.

VirtualMachine.GuestOperations.Execute

Guest operation program execution

Permits running an application inside the VM.

VirtualMachine.GuestOperations.Query

Guest operation queries

Permits querying the guest OS. Operations include listing files.

Virtual machine interaction

VirtualMachine.Interact.AnswerQuestion

Answer question

Permits resolving issues during VM state transitions or runtime errors.

VirtualMachine.Interact.PowerOff

Power off

Permits powering off a powered-on VM.

VirtualMachine.Interact.PowerOn

Power on

Permits powering on or resuming a VM.

VirtualMachine.Interact.ToolsInstall

VMware Tools install

Permits mounting/unmounting the VMware Tools installer.

VirtualMachine.Inventory.CreateFromExisting

Create from existing

Permits cloning or deploying a VM from a template.

VirtualMachine.Inventory.Create

Create new

Permits creating a VM and allocating resources.

VirtualMachine.Inventory.Register

Register

Permits adding an existing VM to an inventory.

VirtualMachine.Inventory.Delete

Remove

Permits deleting a VM and its files. Requires privileges on both the object and its parent.

VirtualMachine.Inventory.Unregister

Unregister

Permits unregistering a VM. This permission requires privileges on both the object and its parent.

Virtual machine provisioning

VirtualMachine.Provisioning.Clone

Clone virtual machine

Permits cloning a VM and allocating resources.

VirtualMachine.Provisioning.Customize

Customize guest

Permits customizing the VM's guest operating system.

VirtualMachine.Provisioning.ModifyCustSpecs

Modify customization specification

Permits creating, modifying, or deleting customization specifications.

VirtualMachine.Provisioning.ReadCustSpecs

Read customization specifications

Permits reading a customization specification for a VM.

Virtual machine service configuration

VirtualMachine.Namespace.Query

Query service configurations

Permits retrieving a list of VM services.

VirtualMachine.Namespace.ReadContent

Read service configuration

Permits retrieving the existing VM service configuration.

Virtual machine snapshot

VirtualMachine.State.CreateSnapshot

Create snapshot

Permits creating a snapshot from the VM's current state.

VirtualMachine.State.RemoveSnapshot

Remove snapshot

Permits removing a snapshot.

VirtualMachine.State.RenameSnapshot

Rename snapshot

Permits renaming a snapshot or updating its description.

VirtualMachine.State.RevertToSnapshot

Revert to snapshot

Permits reverting the VM to the state of a given snapshot.