User Tools

Site Tools


vmware:vcenter6_grant_access

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
vmware:vcenter6_grant_access [2017/02/06 16:30]
admin
vmware:vcenter6_grant_access [2017/02/09 11:12] (current)
admin
Line 15: Line 15:
  
  
-To view and manage licenses, you must have the Global.Licenses privilege on the vCenter Server system where this vSphere Web Client runs.+''​To view and manage licenses, you must have the Global.Licenses privilege on the vCenter Server system where this vSphere Web Client runs.''​
  
  
Line 21: Line 21:
  
 To resolve this issue, assign permissions to the user attempting to access these new features: To resolve this issue, assign permissions to the user attempting to access these new features:
-  * To access the Single Sign-On Administration Section +  * To access the **Single Sign-On** Administration Section 
-    - Log in to the vSphere Web Client with the Administrator@vsphere.local  +    -  Log in to the vSphere Web Client with the ''​Administrator@vsphere.local'' ​ 
-    - Navigate to Administration > Single Sign-On > Users and Groups +    -  Navigate to **Administration** **Single Sign-On** **Users and Groups** 
-    - Under vCenter Users and Groups, select the Groups tab +    -  Under vCenter ​**Users and Groups**, select the **Groups** tab 
-    - Locate the Administrators Group +    -  Locate the **Administrators Group** 
-    - Under Group Members, click Add member () icon +    -  Under **Group Members**, click **Add** member () icon 
-    In the Add Principals window, select the appropriate domain for your user under the Domain drop-down +      - In the **Add Principals** window, select the appropriate domain for your user under the Domain drop-down 
-    - Locate your user   +    -  Locate your user  
-<code sql> +      ​- ​ ''​Note: At this time, only users can use these permissions. For more information,​ see Unable to administer vCenter Single Sign-On after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342).''​ 
-Note: At this time, only users can use these permissions. For more information,​ see Unable to administer vCenter Single Sign-On after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342). +    -  Click **Add** 
-</​code>​ +    -  Click **OK**
-    - Click Add +
-    - Click OK+
  
  
-Once completed, log out of the vSphere Web Client and log in with your user account. Confirm you are able to access the Users and Groups and Configuration sections under Single Sign-On. +Once completed, log out of the vSphere Web Client and log in with your user account. Confirm you are able to access the **Users and Groups** and **Configuration** sections under **Single Sign-On**.
-To access the System Configuration Section+
  
-Before you begin, ensure your user account has Single Sign-On Administration permissions. +  * To access the **System Configuration** Section 
-Log in to the vSphere Web Client with your user account or with the Administrator@vsphere.local  +Before you begin, ensure your user account has **Single Sign-On Administration** permissions. 
-Navigate to Administration > Single Sign-On > Users and Groups +   - Log in to the **vSphere Web Client** with your user account or with the ''​Administrator@vsphere.local'' ​ 
-Under vCenter Users and Groups, select the Groups tab +   - Navigate to **Administration** **Single Sign-On** **Users and Groups** 
-Locate the SystemConfiguration.Administrators Group +   - Under vCenter ​**Users and Groups**, select the **Groups** tab 
-Under Group Members, click the Add member () icon +   - Locate the ''​SystemConfiguration.Administrators Group''​ 
-In the Add Principals window, select the appropriate domain for your user under the Domain drop-down +   - Under **Group Members**, click the **Add** member () icon 
-Locate your user. +   - In the **Add Principals** window, select the appropriate domain for your user under the Domain drop-down 
 +   - Locate your user.  
 +    - **Note**__Underlined Text__: At this time, only users can use these permissions. For more information,​ see Unable to administer vCenter Single Sign-On after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342). 
 +   - Click **Add** 
 +   - Click **OK** 
 +Once completed, log out of the vSphere Web Client and log in with your user account. Confirm you are able to access the **System Configuration** section.
  
-Note: At this time, only users can use these permissions. For more information,​ see Unable to administer vCenter Single Sign-On after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342).+ * To access the Licensing Section ​
  
-Click Add +Users can utilize ​the ''​Administrator''​ default role under **Global Permissions** ​to access the **Licensing** sectionsThis section details out how to create a custom role to only provide users with the Licensing ​sections.
-Click OK +
-Once completed, log out of the vSphere Web Client and log in with your user account. Confirm you are able to access the System Configuration section. +
-To access ​the Licensing ​Section ​+
  
-Users can utilize the Administrator default role under Global Permissions to access the Licensing sections. This section details out how to create a custom role to only provide users with the Licensing sections. +   ​- ​Log in to the vSphere Web Client with the ''​Administrator@vsphere.local'' ​ 
-Log in to the vSphere Web Client with the Administrator@vsphere.local  +   - Create a **Licensing Administration Role**
-Create a Licensing Administration Role: +     * Navigate to **Administration** **Access Control** **Roles** 
-Navigate to Administration > Access Control > Roles +     * Click **Create new role** () icon 
-Click Create new role () icon +     * In the **Create Role** window, ​**add** **Role Name**.  
-In the Create Role window, add a Role Name.  +       * **__Note__**: For this article, we use **Licensing Administration**  
- +     * Under the Privileges section, locate Global. 
-Note: For this article, we use Licensing Administration  +     * Expand Global and select Licenses. This will add a checkbox next to the Privileged. 
- +     * Click OK to save and close the new role 
-Under the Privileges section, locate Global. +   - Adding the Licensing Administration Role 
-Expand Global and select Licenses. This will add a checkbox next to the Privileged. +     - Navigate to Administration > Access Control > Global Permissions 
-Click OK to save and close the new role +     - Click Add permission () icon 
-Adding the Licensing Administration Role +     - In the Global Permissions Root - Add Permissions window, under Assigned Role, select Licensing Administration from the drop-down  
-Navigate to Administration > Access Control > Global Permissions +     - Under the Users and Groups section, click Add 
-Click Add permission () icon +     - In the Select Users/​Groups window, select the appropriate domain for your user under the Domain drop-down 
-In the Global Permissions Root - Add Permissions window, under Assigned Role, select Licensing Administration from the drop-down  +     - Locate your user or group 
-Under the Users and Groups section, click Add +     - Click Add 
-In the Select Users/​Groups window, select the appropriate domain for your user under the Domain drop-down +     - Click OK
-Locate your user or group +
-Click Add +
-Click OK+
 Once completed, log out of the vSphere Web Client and log in with your user account assigned the new role. Confirm you are able to access the Licenses and Reports sections under Licensing. Once completed, log out of the vSphere Web Client and log in with your user account assigned the new role. Confirm you are able to access the Licenses and Reports sections under Licensing.
vmware/vcenter6_grant_access.1486395001.txt.gz · Last modified: 2017/02/06 16:30 by admin