Forbid administrator user to perform vMotion on specific VM.

Products

• VMware vCenter Server

Issue/Introduction

Introduce how to prevent specific administrator user(s) performing vMotion on specific VM.

Resolution

1. Create a Role called "Administrator-vMotion-disabled".
   • Open a vSphere Client web page.
   • Click "Menu(3 lines icon)" >> "Roles". Select "Administrator", click "CLONE".
   • Enter "Administrator-vMotion-disabled" at Role name textbox. Enter "Full access rights except vMotion" at Description textbox. Click "OK".
   • Select "Administrator-vMotion-disabled". Click "EDIT".
   • Deselct "Migrate powered on virtual machine" and "Query vMotion". Click "SAVE".
2. Grant "Administrator-vMotion-disabled" role to users. 
   • Open VM's page, "Permission" tab.
   • If the administrator user already has permission of this VM, click "EDIT" and change its permission from default "Administrator" to "Administrator-vMotion-disabled".
   • If it doesn't have a permission of this VM, click "ADD" and grant "Administrator-vMotion-disabled" role to it.
3. Verify configuration takes effect.
   • Log in as a configured user.
   • When submitting a vMotion task, all types of vMotion is greyed out now.