Virtual Machine Privileges

The following vCenter permissions are required for Backup and Restore operations if a virtual machine is configured as a provider in IBM Spectrum Protect Plus with credentials lower than an administrator.

vCenter Permissions for Backup and Restore Operations

Datacenter

  • Create datacenter
  • Reconfigure datacenter

Datastore

  • Allocate space
  • Browse datastore
  • Configure datastore
  • Low level file operations
  • Remove file
  • Update virtual machine files

Datastore Cluster

  • Configure a datastore cluster

Distributed switch

  • Create
  • Delete
  • Host operation
  • Modify
  • Move
  • Network I/O Control operation
  • Policy operation
  • Port configuration option
  • Port setting operation
  • VSPAN operation

ESX Agent Manager

  • Config
  • Modify
  • View

Extension

  • Register extension

Folder

  • Create folder
  • Delete folder
  • Move folder
  • Rename folder

Global

  • Cancel task
  • Diagnostics (used for troubleshooting, not required for operations)
  • Disable methods
  • Enable methods
  • Licenses
  • Log event
  • Manage custom attributes
  • Set custom attribute
  • Settings

Host > Configuration

  • Advanced settings
  • Storage partition configuration

Inventory Service > vSphere Tagging

  • Assign or Unassign vSphere Tag
  • Create vSphere Tag
  • Create vSphere Tag Category
  • Delete vSphere Tag
  • Delete vSphere Tag Category
  • Modify UsedBy Field For Category
  • Modify UsedBy FIeld For Tag

Network

  • Assign network
  • Configure
  • Move network
  • Remove

Resource

  • Apply recommendation
  • Assign a vApp to resource pool
  • Assign virtual machine to resource pool
  • Create resource pool
  • Migrate powered off VM
  • Migrate powered on VM
  • Modify resource pool
  • Move resource pool
  • Query vMotion
  • Remove resource pool
  • Rename resource pool

Sessions

  • View and stop sessions

Storage views

  • Configure service
  • View

Tasks

  • Create task
  • Update task

Virtual Machine > Configuration

  • Add existing disk
  • Add new disk
  • Add or remove device
  • Advanced
  • Change CPU count
  • Change resource
  • Configure managedBy
  • Disk change tracking
  • Disk lease
  • Display connection settings
  • Extend virtual disk
  • Host USB device
  • Memory
  • Modify device settings
  • Query Fault Tolerance compatibility
  • Query unowned files
  • Raw device
  • Reload from path
  • Remove disk (detach and remove virtual disk)
  • Rename
  • Reset guest information
  • Set annotation
  • Settings
  • Swapfile placement
  • Unlock virtual machine
  • Upgrade virtual machine compatibility

Virtual Machine > Guest Operations

  • Guest Operation Modifications
  • Guest Operation Program Execution
  • Guest Operation Queries

Virtual Machine > Interaction

  • Answer question
  • Backup operation on virtual machine
  • Configure CD media
  • Configure floppy media
  • Console interaction
  • Create screenshot
  • Defragment all disks
  • Device connection
  • Disable Fault Tolerance
  • Enable Fault Tolerance
  • Guest operating system management by VIX API
  • Inject USB HID scan codes
  • Perform wipe or shrink operations
  • Power Off
  • Power On
  • Record session on VM
  • Replay session on VM
  • Reset
  • Resume Fault Tolerance
  • Suspend
  • Suspend Fault Tolerance
  • Test failover
  • Test restart Secondary VM
  • Turn Off Fault Tolerance
  • Turn On Fault Tolerance
  • VMware Tools install

Virtual Machine > Inventory

  • Create from existing
  • Create new
  • Move
  • Register
  • Remove
  • Unregister

Virtual Machine > Provisioning

  • Allow disk access
  • Allow read-only disk access
  • Allow virtual machine download
  • Allow virtual machine files upload
  • Clone template
  • Clone virtual machine
  • Create template from virtual machine
  • Customize
  • Deploy template
  • Mark as template
  • Mark as virtual machine
  • Modify customization specification
  • Promote disks
  • Read customization specifications

Virtual Machine > Service configuration

  • Allow notifications
  • Allow polling of global event notifications
  • Manage service configurations
  • Modify service configurations
  • Query service configurations
  • Read service configurations

Virtual Machine > Snapshot management

  • Create snapshot
  • Remove snapshot
  • Rename snapshot
  • Revert to snapshot

Virtual Machine > vSphere Replication

  • Configure replication
  • Manage replication
  • Monitor replication

vApp

  • Add VM (to vApp)
  • Assign resource pool to vApp
  • Assign vApp (to another vApp)
  • Clone
  • Create
  • Delete
  • Export
  • Import
  • Move
  • Power Off
  • Power On
  • Rename
  • Suspend
  • Unregister
  • View OVF Environment
  • vApp application configuration
  • vApp instance configuration
  • vApp managedBy configuration
  • vApp resource configuration

In the All Privileges section located below the permissions selection window, ensure Propagate to children is selected.

 


IBM Spectrum Protect Plus 10.1.2

Licensed Material - Property of IBM Corp. © IBM Corporation and other(s) 2018. IBM is a registered trademark of the IBM Corporation in the United States, other countries, or both. | 8/23/2018