Organization members are assigned both, organization roles and service roles. As an Organization Owner / Organization Admin, you have the authority to modify these role assignments for members of your organization.
Organization roles specify the privileges that an organization member has over organization assets.
Service roles specify the privileges that an organization member has when accessing VMware Cloud Services that the organization uses.
All service roles can be edited and changed by a user with organization owner privileges.
Organization Owners and Organization Admins can access the Identity & Access Management (IAM) page through the left-hand navigation menu. Within this section, they are able to edit the permission of a User.
1. Navigate to the Users section
2. Existing users are listed under the Active Users section. To modify a user's permissions, select the relevant user and click the Edit (pencil) icon.
3. Add an additional role or remove an existing role for that user, followed by any changes to be made at the service role section.
4. Click Save to apply the changes.