zerto/zerto_vcenter_role_least_privileges
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

initial readme

Browse Source
This commit is contained in:
Mike M
2021-08-05 13:47:09 -04:00
committed by GitHub
parent 61993ec23e
commit b1e82fa084
1 changed files with 18 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+18 -1
View File
@@ -1 +1,18 @@
# zerto_vcenter_role_least_privileges
# Legal Disclaimer
This script is an example script and is not supported under any Zerto support program or service. The author and Zerto further disclaim all implied warranties including, without limitation, any implied warranties of merchantability or of fitness for a particular purpose.
In no event shall Zerto, its authors or anyone else involved in the creation, production or delivery of the scripts be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or the inability to use the sample scripts or documentation, even if the author or Zerto has been advised of the possibility of such damages. The entire risk arising out of the use or performance of the sample scripts and documentation remains with you.
# What This Script Does
In the vCenter and Hyper-V Installation Guide, Zerto documents the list of the minimum privileges needed for a ZVM to work with a vCenter. A common mistake is for users to assign a full administrator role to this service account which is not a best practice. Zerto recommends you create a separate role with least privleges for that account to use. The guide lists the privileges and explains why each is needed in greater detail. For information, please read the guide.
The goal of the script is to automate the creation of that role via script to minimize time and possibility for error. Also, this script is kept up-to-date as Zerto releases new versions and may differ slightly from the guide based on feedback and testing and lag time in documentation updates.
# Requirements
- Supported version of VMware's PowerCLI Powershell Module
- Appropriate privileges to create a role in vCenter
# How to use this script
Make sure you are connect to a vCenter using a command like Connect-VIServer and with a user with appropriate privileges to create/edit a VIRole in that vCenter. Then run this script, which will read in the appropriate vCenter privileges from the text file and create a new role using New-VIRole. You can then assign the ZVM service account this role at the top level of vCenter with propogation to children enabled.