Reference For: administrators

Built-in roles

The roles every installation has, with their privileges by group and a matrix of role and privilege group.

Administrator

All privileges.

Read-only

The System privileges only: see objects and read their properties.

No access

No privileges at all; assigned on an object, it blocks inherited permissions.

No privileges.

Virtual machine power user

Power operations, console, snapshots, and the CPU and memory of virtual machines.

Virtual machine user

Everything on virtual machines except deletion and guest operations, with datastore browsing, network assignment and resource group assignment.

Backup operator

The privileges a backup product needs: change tracking, disk access, snapshots, and restore into new virtual machines.

Tenant administrator

Everything inside one tenant, granted on the tenant's folders and pools: servers, snapshots, console, and the tenant's own users and API tokens.

Tenant user

Operating a tenant's servers (power, console, snapshots), granted on the tenant's folders and pools.

Tenant service principal

The self-service portal's service principal, granted on the inventory root: tenants, plans and catalogue read, webhooks, usage and what tenant servers need.

Roles and privilege groups

RoleSystemGlobalAlarmScheduledTaskAuthorizationSessionsDatacenterFolderHostResourceDatastoreNetworkDVSwitchDVPortgroupVirtualMachineVAppInventoryServiceContentLibraryKyvernon.WebhookKyvernon.UsageKyvernon.IdentityKyvernon.TenantKyvernon.PlanKyvernon.CatalogueKyvernon.Firewall
Administratorallallallallallallallallallallallallallallallallallallallallallallallallall
Read-onlyallnonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenone
No accessnonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenonenone
Virtual machine power userallnonenonenonenonenonenonenonenonenonenonenonenonenonesomenonenonenonenonenonenonenonenonenonenone
Virtual machine userallnonenonenonenonenonenonenonenonesomesomesomenonenonesomenonenonenonenonenonenonenonenonenonenone
Backup operatorallsomenonenonenonenonenonenonenonesomesomesomenonenonesomenonenonenonenonenonenonenonenonenonenone
Tenant administratorallnonenonenonenonenonenonenonenonesomenonenonenonenonesomenonenonenonenoneallnonesomenonenonesome
Tenant userallnonenonenonenonenonenonenonenonenonenonenonenonenonesomenonenonenonenonenonenonenonenonenonesome
Tenant service principalallnonenonenonenonenonenonenonenonesomenonenonenonenonesomenonenonenoneallallnoneallnonenonesome

Version 0.1.