How to give domain users read-only permission in vSphere with Tanzu.

Products

• VMware vCenter Server

Issue/Introduction

1. If an administrator wants to grant read-only access to specific domain users in a vSphere with Tanzu environment, this article outlines the necessary steps to do so.

2. AD user cannot see any TKGs resources(Supervisor VMs, TKC cluster VMs) under vCenter Inventory.

Environment

VMware Sphere with Tanzu 7.x

VMware Sphere with Tanzu 8.x

Resolution

1. Add the user to the following group : ServiceProvideUsers
   Steps:  Login to vSphere UI > Administration > Users and Groups > Groups Tab > search for "ServiceProvideUsers" > click Edit, then add required member/user.
2. Keep Read-Only permission for this user Under the Global Permissions.
3. Grant "can view" permission to this user on the Supervisor Namespace > click namespace name > Permission Tab >  click Add
   
   
   
   
   

Additional Information

Impact/Risks:
N/A