# Privileges

Content Library
:   - All Content Library privileges

Datastore/Datastore Cluster
:   - Allocate Space
    - Browse Datastore
    - Low Level file Operations
    - Remove File
    - Update virtual machine files
    - Update virtual machine metadata

Distributed Switch
:   - Port configuration operation
    - Port setting operation

Global
:   - Log Event
    - Manage custom attributes
    - Set custom attribute

Network
:   - Assign Network
    - Configure
    - Remove

Resource
:   - Apply recommendation
    - Assign vApp to resource pool
    - Assign virtual machine to resource pool
    - Migrate powered off virtual machine
    - Migrate powered on virtual machine

Scheduled task
:   - Create tasks
    - Modify task
    - Remove task
    - Run task

Tasks
:   - Create task
    - Update task

Virtual Machine
:   - Configuration (all)
    - Guest Operations (all)
    - Interaction (all)
    - Inventory (all)
    - Provisioning (all)
    - Service configuration (all)
    - Snapshot management (all)
    - vSphere Replication (all)

vApp
:   - Clone
    - Export
    - Import

vSphere Tagging
:   - Assign or Unassign vSphere Tag
    - Assign or Unassign vSphere Tag on Object
    - Create vSphere Tag
    - Create vSphere Tag Category
    - Delete vSphere Tag
    - Delete vSphere Tag Category
    - Edit vSphere Tag
    - Edit vSphere Tag Category
    - Modify UsedBy Field For Category
    - Modify UsedBy Field For Tag
    - privilege.InventoryService.Tagging.CreateScope.label
    - privilege.InventoryService.Tagging.DeleteScope.label

With the User and Role created, add permissions to associate the User and Role to the appropriate usage constructs. Navigate to the usage construct you wish to work with, navigate to the permissions tab, click the plus (+) button. In the screenshot below, I’m adding the permission for the vCenter usage construct. The complete list of usages and whether or not to mark the propagation box is below the image.

NOTE

For organization and security purposes, permissions can also be added to folders. This allows VM Essentials to see the folders and onboard any resources within them (if desired). Once the vCenter Cloud integration has been created in VM Essentials, you can view folders from the Cloud Detail Page (Infrastructure > Clouds > Selected Cloud > ResourcesTab). By editing the folder here (Actions > Edit), folders can be set as the “Default” and/or the “Image Target”. When a folder is set as Default, this folder is pre-selected when provisioning new Instances into the Cloud. When a folder is set as the Image Target, VM Essentials will look into this folder to onboard VMware images into VM Essentials.

![../../../_images/addPerms.png](https://support.hpe.com/hpesc/public/api/document/sd00008058en_us/GUID-C8A5BC12-8BBF-47AF-A193-BD89D2392417-high.png)
