Roles and permissions in vCloud Government Services

Products

VMware

Issue/Introduction

This article provides information on Roles and Permissions assigned in vCloud Government Services (vCGS), and how to request a change to that access. This article applies to you if:

You have access to vCGS platform and want to change the default permissions granted.
You want to reduce the permissions for a specific user in vCGS vCloud Director Web Interface.
You want to modify access for yourself or someone in your organization.

Cause

Resolution

To change a Role of a user in Organization, create a service request to vCloud Government Services provided by Carpathia stating the username of the user in question and which Role they should be assigned.

List of the overall Roles and definitions in vCGS and how they are configured:

Catalog Author – Rights given to users who can create and publish new catalogs. Catalog Authors do not have the ability to view/manage Gateway services, Administrator control and view, Organization VDC Networks, Organization policies and settings, Organization VDCs, and Users.
Console Access Only – Rights given to users who only need guest OS access and to view the virtual machine state and properties. No other access is given.
OrgAdmin – This is the default access type for any user. All rights given from built in Role Organization Administrator are given here with exception of User and Federation viewing and modification.
vApp Author – Rights given to users who manage catalog’s and create/modify vApps. vApp Authors do not have the ability to view/manage Gateway services, Administrator control and view, Organization VDC Networks, Organization policies and settings, Organization VDCs, and Users.
vApp User – Rights given to users who access vApps created by others. vApp User do not have the ability to view/manage catalog’s, Gateway services, Administrator control and view, Organization VDC Networks, Organization policies and settings, Organization VDCs or Users.

Additional Information

Detailed list of rights per Role:

Catalog Author
- Catalog
  - Add a vApp from My Cloud
  - Create/Delete a Catalog
  - Edit Catalog Properties
  - Allow External Publishing /Subscriptions for the Catalogs
  - Share a Catalog to Users/Groups within Current Organization
  - Share a Catalog to Other Organizations
  - View Private and Shared Catalogs within Current Organization
- Catalog Item
  - Add to My Cloud
  - Copy/Move a vApp Template/Media
  - Create/Upload a vApp Template /Media
  - Enable vApp Template/Media Download
  - Edit vApp Template/Media Properties
  - View vApp Templates/Media
- Disk
  - Change Owner
  - Create a Disk
  - Delete a Disk
  - Edit Disk Properties
  - View Disk Properties
- vApp
  - Access to VM Console
  - Copy a vApp
  - Create/Reconfigure a vApp
  - Create/Revert/Remove a Snapshot
  - Delete a vApp
  - Edit vApp Properties
  - Edit VM CPU
  - Edit VM Hard Disk
  - Edit VM Memory
  - Edit VM Network
  - Edit VM Properties
  - Manage VM Password Settings
  - Share a vApp
  - Start/Stop/Suspend/Reset a vApp
Console Access Only
- vApp
OrgAdmin
- Catalog
  - Add a vApp from My Cloud
  - Change Owner
  - Create/Delete a Catalog
  - Edit Catalog Properties
  - Allow External Publishing /Subscriptions for the Catalogs
  - Share a Catalog to Users/Groups within Current Organization
  - Share a Catalog to Other Organizations
  - View Private and Shared Catalogs within Current Organization
  - View Shared Catalogs from Other Organizations
- Catalog Item
  - Add to My Cloud
  - Copy/Move a vApp Template/Media
  - Create/Upload a vApp Template /Media
  - Enable vApp Template/Media Download
  - Edit vApp Template/Media Properties
  - View vApp Templates/Media
- Disk
  - Change Owner
  - Create a Disk
  - Delete a Disk
  - Edit Disk Properties
  - View Disk Properties
- Gateway
  - Configure Services
- General
  - Administrator Control
  - Administrator View
  - Send Notification
- Organization VDC Network
  - Edit Properties
  - View Properties
- Organization
  - Edit Leases Policy
  - Edit Organization Network Properties
  - Edit Organization Properties
  - Edit Password Policy
  - Edit Quotas Policy
  - Edit SMTP Settings
  - View Organization Networks
  - View Organizations
- Organization VDC
  - Set Default Storage Plicy
  - View Organization VDCs
- vApp
  - Access to VM Console
  - Change Owner
  - Copy a vApp
  - Create/Reconfigure a vApp
  - Create/Revert/Remove a Snapshot
  - Delete a vApp
  - Download a vApp
  - Edit vApp Properties
  - Edit VM CPU
  - Edit VM Hard Disk
  - Edit VM Memory
  - Edit VM Network
  - Edit VM Properties
  - Manage VM Password Settings
  - Share a vApp
  - Start/Stop/Suspend/Reset a vApp
  - Upload a vApp
vApp Author
- Catalog
  - Add a vApp from My Cloud
  - View Private and Shared Catalogs within Current Organization
- Catalog Item
  - Add to My Cloud
  - Copy/Move a vApp Template/Media
  - View vApp Templates/Media
- Disk
  - Create a Disk
  - Delete a Disk
  - Edit Disk Properties
  - View Disk Properties
- vApp
  - Access to VM Console
  - Copy a vApp
  - Create/Reconfigure a vApp
  - Create/Revert/Remove a Snapshot
  - Delete a vApp
  - Download a vApp
  - Edit vApp Properties
  - Edit VM CPU
  - Edit VM Hard Disk
  - Edit VM Memory
  - Edit VM Network
  - Edit VM Properties
  - Manage VM Password Settings
  - Share a vApp
  - Start/Stop/Suspend/Reset a vApp
  - Upload a vApp
vApp User

Catalog Item
- Add to My Cloud
- View vApp Templates/Media
Disk
- View Disk Properties
vApp
- Access to VM Console
- Copy a vApp
- Create/Revert/Remove a Snapshot
- Delete a vApp
- Edit vApp Properties
- Edit VM Network
- Edit VM Properties
- Manage VM Password Settings
- Share a vApp
- Start/Stop/Suspend/Reset a vApp