...
By default enterprise administrators can access this feature on the Volumes tab in Virtual datacenters or through the API.
And the user can add volumes to a VM by editing the VM on the Storage tab and dragging available volumes into the Storage list. Note that the Volumes heading will continue to display even after the privilege is removed.
Control access to volumes feature
...
- Remove the "Manage virtual storage elements" privilege from the enterprise administrator role
Persistent templates feature
...
By default, users can manage persistent templates on the Persistent VM templates tab in Virtual datacenters.
Users can create VMs from persistent templates on the Persistent VM tab in Virtual datacenters → open a virtual appliance → Virtual machines, or through the API.
The Persistent VM tab option displays beside the Templates tab.From this tab the user can also create new persistent templateswith the Template option when the user creates a VM.
Control access to the persistent templates feature
...
- Remove the "Access persistent templates view" privilege from the user role
To disable the display of the Persistent VM tab option so that the user cannot create persistent VMs by dragging and dropping persistent templates:
- Remove the "Access persistent templates view" privilege from the user role
To prevent the user from creating persistent templates, using the + button in on the Persistent VM templates tab or through the API:
- Remove "Manage persistent templates" privilege from the user role