Add a vMotion only role to user in vCenter

Products

• VMware vCenter Server 8.0

Issue/Introduction

Symptoms:

Customer wants to grant non-administrator users a custom vMotion only role, i.e., with permissions restricted to vMotion only.

The article gives steps to do the configuration.

Environment

VMware vCenter Server 8.0 

Resolution

 

• Navigate to Administration > Access Control > Roles in vCenter.
• Create a new custom role and enable the following:
  • Datastore > Allocate space
  • Resource > Assign virtual machine to resource pool
  • Resource
     > Migrate powered on virtual machine
  • Resource
     > Migrate powered off virtual machine
  • Network > Assign network
  • Cryptographic operations > Migrate
• Assign this role to the target user/group at the appropriate inventory level (e.g., Global or Cluster) and ensure "Propagate to children" is checked.

 

Additional Information

Please see document below

https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere-supervisor/8-0/required-privileges-for-common-tasks.html

In case there are Affinity Rules blocking the vMotion then please refer to KB below

https://knowledge.broadcom.com/external/article/429035/error-permission-to-perform-this-operati.html