Description of volumes feature
By default, enterprise administrators can manage persistent volumes, which are located on external storage devices. When the user undeploys or detaches a volume, the data is intact and the user can attach the volume to another VM. This feature requires external storage devices.Enterprise
Default access to volumes feature
By default enterprise administrators can access this feature on the Volumes tab in Virtual datacenters or through the API.
...
And the user can add volumes to a VM by editing the VM on the Storage tab and dragging available volumes into the Storage list. Note that the Volumes heading will continue to display even after the privilege is removed.
Control access to volumes feature
It is easy to remove access to this feature by removing privileges that are present in the default enterprise administrator role.
...