Applying a role to perform virtual machine power operations only to specific users on vSphere Client

Products

• VMware vCenter Server

Issue/Introduction

This article explains how to apply a role to perform virtual machine power operations only to specific users on vSphere Client.

Environment

VMware vCenter Server

Resolution

1. Connect vSphere Client and open [Administration] -> [Access Control] -> [Roles]. 
2. Create a new role with the following privileges only: 
   

    Virtual machine

       Interaction
           Answer question
           Console interaction
           Power off
           Power on
           Reset
           Suspend

3. Go to [Access Control] -> [Global Permissions] and add the created role to target user(s) with checking [Propagate to children] option.
   
   

The target user(s) can perform power-on/off, reset, suspend virtual machines and shutdown/restart guest OS operations only via vSphere Client. 

Additional Information

Virtual Machine Interaction Privileges