Steps to disable VMRC and Web console for one specific VM

Products

• VMware vCenter Server

Issue/Introduction

For security purposes, e.g. to protect sensitive data, it might be necessary to restrict users from accessing virtual machines using VM remote console (VMRC).

This article explains a way to achieve this restriction.

Environment

VMware vCenter Server 7.0.x

VMware vCenter Server 8.0.x

Resolution

To achieve the required configuration and disable a certain user from accessing the VM remote console, the following example steps can be used:

• Go to Roles --> Create a Clone of Administrator --> From this, under, Virtual Machine → Interaction, remove :Console interaction. (Rename this role as Restricted VM Console Access. )
• Now, go to the VM --> Permissions --> Now assign this user --> Restricted VM Console Access
• Then, go to global permissions --> give this user administrator privileges. 
• This will disable VMRC as well as web console for the VM , at the same time giving the user all the other access in the environment.