By default, users enterprise administrators can work with manage persistent storage volumes, which are VM templates containing persistent volumes as the primary disklocated on external storage devices. This feature requires external storage volumesdevices.
Users Enterprise administrators can access this feature on the Persistent VM tab in Virtual datacenters → open a virtual appliance → Virtual machines, or Volumes tab in Virtual datacenters or through the API.
The Persistent VM tab displays beside the Templates tab.
From this tab the user can also create new persistent templates
And the user can add volumes to a VM by editing the VM on the Storage tab and dragging available volumes into the Storage list. Note that the Volumes title will continue to display even after the privilege is removed.
It is easy to remove access to this feature by removing a couple of privileges that are present in the default user enterprise administrator role.
To disable the display of the Persistent VM Volumes tab so that the user cannot create persistent VMs by dragging and dropping persistent templatesmanage persistent volumes.
- Remove the "Access persistent templates viewManage virtual storage elements" privilege from the user enterprise administrator role
To prevent the user from creating persistent templates, using the + button in on the Persistent VM tab or through the API:
- Remove "Manage persistent templates" privilege from the user role