Enterprise administrators can manage persistent volumes, which are located on external storage devices. When the user undeploys or detaches a volume, the data is intact and the user can attach the volume to another VM. This feature requires external storage devices or a public cloud provider that supports volumes, such as AWS or Azure.
Default access to volumes feature
By default enterprise administrators can access this feature on the Volumes tab in Virtual datacenters or through the API.
And the user can add volumes to a VM by editing the VM on the Storage tab and dragging available volumes into the Storage list. Note that the Volumes heading will continue to display even after the privilege is removed.
Control access to volumes feature
It is easy to remove access to this feature by removing privileges that are present in the default enterprise administrator role.
To disable the display of the Volumes tab so that the user cannot manage persistent volumes.
Remove the "Manage virtual storage elements" privilege from the enterprise administrator role