Volumes feature
Description of volumes feature
Enterprise administrators can manage persistent volumes, which are located on external storage devices. When the user undeploys or detaches a volume, the data is intact and the user can attach the volume to another VM. This feature requires external storage devices.
Default access to volumes feature
By default enterprise administrators can access this feature on the Volumes tab in Virtual datacenters or through the API.
And the user can add volumes to a VM by editing the VM on the Storage tab and dragging available volumes into the Storage list. Note that the Volumes heading will continue to display even after the privilege is removed.
Control access to volumes feature
It is easy to remove access to this feature by removing privileges that are present in the default enterprise administrator role.
To disable the display of the Volumes tab so that the user cannot manage persistent volumes.
- Remove the "Manage virtual storage elements" privilege from the enterprise administrator role
Persistent templates feature
Description of persistent templates feature
Users can work with persistent VM templates that enable users to create VMs with persistent volumes as the primary disks. This feature requires external storage devices.
Default access to persistent templates feature
By default, users can manage persistent templates on the Persistent VM templates tab in Virtual datacenters.
Users can create VMs from persistent templates on the Persistent VM tab in Virtual datacenters → open a virtual appliance → Virtual machines, or through the API.
The Persistent VM option displays with the Template option when the user creates a VM.
Control access to the persistent templates feature
To remove access to persistent templates, remove the following privileges that are present in the default user role.
To disable the display of the Persistent VM templates tab at the VDC level:
- Remove the "Access persistent templates view" privilege from the user role
To disable the display of the Persistent VM option so that the user cannot create persistent VMs by dragging and dropping persistent templates:
- Remove the "Access persistent templates view" privilege from the user role
To prevent the user from creating persistent templates, using the + button on the Persistent VM templates tab or through the API:
- Remove "Manage persistent templates" privilege from the user role