Privileges

The following table describes all the privileges in the cloud platform.

Changes to privileges

GUI Label _________________	Application Tag	Privilege____________________________________	Cloud Admin	Ent Admin	Ent User	Ent Viewer	Info
Home privileges
List enterprises within scope	ENTERPRISE_ENUMERATE	This privilege allows a user to view the list of enterprises within scope and to view statistics for those enterprises	X
Allow user to switch enterprise	ENTERPRISE_ADMINISTER_ALL	This privilege allows a user to change to another enterprise, in order to administer it, by clicking the switch user button in the Enterprises list	X
Display enterprise statistics	ENTERPRISE_RESOURCE_SUMMARY_ENT	This privilege allows a user to filter statistics by enterprise to display the resources used by an enterprise in the enterprise resources panel	X	X		X
Display enterprise limits in statistics	ENTERPRISE_SHOW_STATS_LIMITS	This privilege allows a user to view enterprise limits in addition to resources used in the enterprise resources panel if the user has the Display enterprise statistics privilege	X	X	X
View bills	BILLS_VIEW	This privilege allows a user to view bills and related widgets	X
Manage bills	BILLS_MANAGE	This privilege allows a user to manage bills	X
Infrastructure privileges
GUI Label _________________	Application Tag	Privilege____________________________________	Cloud Admin	Ent Admin	Ent User	Ent Viewer	Info
Access infrastructure view and private DCs	PHYS_DC_ENUMERATE	This privilege allows a user to access the Infrastructure view and list the physical datacenters	X
Display resource usage panel	PHYS_DC_RETRIEVE_RESOURCE_USAGE	This privilege allows a user to view the resource usage panel in the Infrastructure view	X
Manage datacenter	PHYS_DC_MANAGE	This privilege allows a user to manage datacenters (add, edit and delete). Without it, the datacenter's properties will be read only	X
View datacenter details	PHYS_DC_RETRIEVE_DETAILS	This privilege allows a user to go inside a datacenter and view its details (racks, physical machines, networks, storage and allocation rules)	X
Manage datacenter infrastructure elements	PHYS_DC_ALLOW_MODIFY_SERVERS	This privilege allows a user to manage infrastructure elements (add, edit and delete racks and physical machines)	X
Manage network elements	PHYS_DC_ALLOW_MODIFY_NETWORK	This privilege allows a user to manage network elements (add, edit and delete public networks)	X
Manage storage elements	PHYS_DC_ALLOW_MODIFY_STORAGE	This privilege allows a user to manage storage elements (add, edit and delete storage devices, pools, tiers and volumes)	X
Manage allocation rules	PHYS_DC_ALLOW_MODIFY_ALLOCATION	This privilege allows a user to manage allocation rules (add and delete rules)	X
Manage datacenter backup configuration	PHYS_DC_ALLOW_BACKUP_CONFIG	This privilege allows a user to manage backup configuration at datacenter level	X
Manage devices	MANAGE_DEVICES	This privilege allows a user to setup networking devices (Neutron)	X
Manage public cloud regions	PCR_MANAGE	This privilege allows a user to manage public cloud regions (add, edit and delete). Without it, the public cloud region's properties will be read only	X
Access infrastructure view and PCRs	PCR_ENUMERATE	This privilege allows a user to access the Infrastructure view and list the public cloud regions	X
View public cloud region details	PCR_RETRIEVE_DETAILS	This privilege allows a user to go inside a public cloud region and view its details (virtual machines and hardware profiles)	X
Manage hardware profile types and family	MANAGE_HARDWARE_PROFILE_TYPE_AND_FAMILY	This privilege allows the user to manage hardware profile types and family (add, edit and delete)	X
View and manage protection managers	MANAGE_DRAAS_CONFIG	This privilege allows the user to manage protection managers for disaster recovery (create, edit, and delete)	X
Virtual datacenters privileges
GUI Label _________________	Application Tag	Privilege____________________________________	Cloud Admin	Ent Admin	Ent User	Ent Viewer	Info
Access virtual datacenters view	VDC_ENUMERATE	This privilege allows a user to access the Virtual Datacenters view	X	X	X	X
Manage virtual datacenters	VDC_MANAGE	This privilege allows a user to manage virtual datacenters (add, edit and delete). Without it, the virtual datacenter details are read only	X	X
Manage virtual appliances	VDC_MANAGE_VAPP	This privilege allows a user to manage virtual appliances (add, edit and delete)	X	X	X
Manage virtual network elements	VDC_MANAGE_NETWORK	This privilege allows a user to manage private and public networks (add, edit and delete)	X	X
Manage virtual storage elements	VDC_MANAGE_STORAGE	This privilege allows a user to manage storage volumes (add, edit and delete)	X	X
Manage floating IPs	MANAGE_FLOATINGIPS	This privilege allows a user to manage floating IPs (add and delete)	X	X
Manage firewalls	MANAGE_FIREWALLS	This privilege allows a user to manage firewalls (add, edit and delete) for virtual datacenters	X	X
Manage load balancers	MANAGE_LOADBALANCERS	This privilege allows a user to manage load balancers (add, edit and delete) for virtual datacenters	X	X
Manage virtual storage controller	VDC_MANAGE_STORAGE_CONTROLLER	This privilege allows a user to manage the controller of storage volumes	X	X	X
Manage public IPs	MANAGE_PUBLICIPS	This privilege allows a user to manage public IPs for private virtual datacenters	X	X	X
Modify allocation when attaching a disk	VDC_MANAGE_STORAGE_DISK_ALLOCATION	This privilege allows a user to modify the allocation of disks before they are deployed to the hypervisor and specify allocation when attaching a new disk and it is not possible once the VM is deployed (disk already created/copied)	X
Manage NAT IPs	MANAGE_NATIPS	This privilege allows a user to manage NAT IPs for private virtual datacenters	X	X	X
Manage VPNs	MANAGE_VPN	This privilege allows a user to manage VPNs	X	X
Manage classic firewalls	MANAGE_CLASSIC_FIREWALLS	This privilege allows a user to manage classic firewalls (edit and delete) for devices	X
Manage private IP reservations	MANAGE_PRIVATEIP_RESERVATION	This privilege allows a user to manage private IP reservations	X
Manage default virtual datacenter firewall	MANAGE_DEFAULT_FIREWALL	This privilege allows a user to define a default virtual datacenter firewall	X
Manage enterprise datacenter default roles	VDC_MANAGE_DEFAULT_ROLE	This privilege allows a user to manage enterprise datacenter default roles (creation/edition)	X
Access public network tab	VDC_VIEW_PUBLIC_NETWORK	This privilege gives the user access to public network resources in virtual infrastructure	X	X	X	X
Manage public network elements	VDC_MANAGE_PUBLIC_NETWORK	This privilege allows a user to manage public network resources in virtual infrastructure	X	X	X	X
Access external network tab	VDC_VIEW_EXTERNAL_NETWORK	This privilege gives the user access to external network resources in virtual infrastructure	X	X	X	X
Manage external network elements	VDC_MANAGE_EXTERNAL_NETWORK	This privilege allows a user to manage external network resources in virtual infrastructure	X	X	X	X
Manage availability sets	MANAGE_AVAILABILITY_SET	This privilege allows a user to manage availability sets (add and delete) for virtual datacenters	X	X
Assign availability set to VM	ASSIGN_AVAILABILITY_SET	This privilege allows a user to assign availability sets to virtual machine (create and edit VM)	X	X
Manage the bandwidth limit for NAT	MANAGE_BANDWIDTHLIMIT_NAT	This privilege allows a user to manage the bandwidth limit for NAT	X
Manage the bandwidth limit for public IPs	MANAGE_BANDWIDTHLIMIT_PUBLIC	This privilege allows a user to manage the bandwidth limit for public IPs	X
Manage resource groups	MANAGE_RESOURCE_GROUP	This privilege allows a user to create resource groups	X	X	X
Delete resource groups	DELETE_RESOURCE_GROUP	This privilege allows a user to delete resource groups	X	X	X
Manage global networks	MANAGE_GLOBAL_NETWORK	This privilege allows a user to manage global networks	X	X	X
Update private MAC IP	UPDATE_MAC_IP	This privilege allows a user to update private MAC IP	X
Virtual appliances privileges
GUI Label _________________	Application Tag	Privilege____________________________________	Cloud Admin	Ent Admin	Ent User	Ent Viewer	Info
Edit virtual appliance details	VAPP_CUSTOMISE_SETTINGS	This privilege allows a user to edit virtual appliance details (name, CPUs, etc.), go inside virtual appliances and view their details	X	X	X
Deploy and undeploy virtual appliances	VAPP_DEPLOY_UNDEPLOY	This privilege allows a user to deploy/undeploy virtual appliances	X	X	X
Perform virtual machine actions	VAPP_PERFORM_ACTIONS	This privilege allows a user to perform virtual machine actions (power on/off, pause, reboot, remote access)	X	X	X
Manage persistent templates	VAPP_CREATE_STATEFUL	This privilege allows a user to manage persistent virtual machine templates (create in VApp; create, edit and delete in virtual datacenter)	X	X	X
Create instance	VAPP_CREATE_INSTANCE	This privilege allows a user to create instance templates of a virtual machine within a virtual appliance	X	X	X
Manage virtual machine hard disks	MANAGE_HARD_DISKS	This privilege allows a user to access the virtual machine hard disk tab and manage hard disks (add and delete)	X	X
Manage layers	VAPP_MANAGE_LAYERS	This privilege allows a user to manage anti-affinity layers in virtual appliances (create, edit and delete layers)	X	X	X
Manage virtual machine backup configuration	VAPP_MANAGE_BACKUP	This privilege allows a user to access the backup configuration at virtual machine level and set the backup type and contents	X
Manage virtual machine backup schedule	VAPP_DEFINE_BACKUP_INFO	This privilege allows a user to specify an additional option for backup configuration by setting backup dates and times	X
Manage workflow tasks	WORKFLOW_OVERRIDE	This privilege allows a user to start or cancel queued tasks if workflow is enabled	X	X
Delete unknown virtual machines	VAPP_DELETE_UNKNOWN_VM	This privilege allows a user to delete virtual machines in unknown state	X
Assign firewalls to virtual machines	ASSIGN_FIREWALLS	This privilege allows a user to assign already created firewalls to virtual machines	X	X
Access persistent templates view	VAPP_STATEFUL_VIEW	This privilege allows a user to access the persistent virtual machine templates view	X	X	X
Manage virtual machine backup disks	VAPP_MANAGE_BACKUP_DISKS	This privilege allows a user to specify disks and disk backup types (snapshot and complete)	X	X
Assign load balancers	ASSIGN_LOADBALANCERS	This privilege allows a user to assign load balancers	X	X
Manage virtual machine metrics	USERS_ENABLE_DISABLE_VM_METRICS	This privilege allows a user to activate monitoring of virtual machines	X	X	X
Access metrics	USERS_SHOW_METRICS	This privilege allows a user to manage monitoring	X	X	X	X
Restore virtual machine backups	VAPP_RESTORE_BACKUP	This privilege allows a user to restore virtual machine backups	X	X
Protect/unprotect virtual machines	VM_PROTECT_ACTION	This privilege allows a user to protect/unprotect a virtual machine	X
Consume virtual appliance specs	CONSUME_VAPP_SPEC	This privilege allows a user to consume virtual appliance specs	X
Override virtual machine constraints	VM_EXCEED_CPU_RAM	This privilege allows a user to modify virtual machine CPU and RAM to values outside the maximum and minimum values defined in the virtual machine template	X
Edit virtual machine details	VM_EDIT_CPU_RAM	This privilege allows a user to edit virtual machine details (CPU and RAM)	X	X	X
Retrieve default template credentials	VM_CHECK_USER_PASSWORD	This privilege allows a user to retrieve the default user and password of a template	X
Relocate a VM to a compatible host	VM_RELOCATE	This privilege allows a user to relocate a VM to a compatible host	X
Manage workflow for scaling groups	SCALING_GROUP_MANAGE_WORKFLOW	This privilege allows a user to enable or disable workflow for scaling groups.	X
Attach NICs in restricted networks to VMs	VM_ATTACH_NIC	This privilege allows a user to attach NICs in restricted networks	X
Detach NICs in restricted networks from VMs	VM_DETACH_NIC	This privilege allows a user to detach NICs in restricted networks	X
Manage scaling groups	MANAGE_SCALING_GROUPS	This privilege allows a user to manage scaling groups (add, edit and delete)	X
Manage virtual machine ISO disks	MANAGE_ISO	This privilege allows a user to manage ISO disks in virtual machines (add, edit and delete)	X
Manage restricted VApps and VMs	VAPP_RESTRICTED_MANAGE	This privilege allows a user to manage restricted VApps and VMs	X
View restricted VApps and VMs	VAPP_RESTRICTED_VIEW	This privilege allows a user to view restricted VApps and VMs	X
Restrict VM	VM_RESTRICT	This privilege allows a user to restrict VMs	X
Move VMs	MANAGE_MOVE_VM	This privilege allows a user to move VMs between VDCs	X
Retrieve virtual machine initial password	VM_RETRIEVE_INITIAL_PASSWORD	This privilege allows a user to retrieve the initial password of a virtual machine	X
Assign public IPs to VMs	VM_ASSIGN_PUBLIC_IP	This privilege allows a user to assign public IPs to VMs	X	X	X	X
Assign external IPs to VMs	VM_ASSIGN_EXTERNAL_IP	This privilege allows a user to assign external IPs to VMs	X	X	X	X
Reset VM guest password	VM_RESET_GUEST_PASSWORD	This privilege allows a user to reset the initial password of a virtual machine	X
Manage VM disaster recovery protection	VM_MANAGE_DRAAS	This privilege allows a user to enable or disable disaster recovery protection for VMs	X	X
Apps library privileges
GUI Label _________________	Application Tag	Privilege____________________________________	Cloud Admin	Ent Admin	Ent User	Ent Viewer	Info
Access Apps library view	APPLIB_VIEW	This privilege allows a user to access the Appliance library view	X	X
Manage VM templates from Apps library	APPLIB_ALLOW_MODIFY	This privilege allows a user to view the Appliance library contents, modify virtual machine templates (download from remote repositories, edit and delete) and promote instances	X	X
Upload virtual machine template	APPLIB_UPLOAD_IMAGE	This privilege allows a user to upload virtual machine templates from a local file into the Apps library	X	X
Manage repository	APPLIB_MANAGE_REPOSITORY	This privilege allows a user to manage repositories (add and delete repositories)	X	X
Download virtual machine template	APPLIB_DOWNLOAD_IMAGE	This privilege allows a user to download virtual machine templates from the Appliance library to their hard disk	X	X
Manage VM template categories	APPLIB_MANAGE_CATEGORIES	This privilege allows a user to manage categories of virtual machine templates that belong to their enterprise (add and delete)	X	X
Manage VM template global categories	APPLIB_MANAGE_GLOBAL_CATEGORIES	This privilege allows a user to manage categories of virtual machine templates that are common and available to all enterprises (add and delete)	X
Display datacenter capacity and free space	APPLIB_SHOW_DC_CAPACITY	This privilege allows a user to view the capacity and remaining space of a datacenter	X
Export a virtual machine template to datacenter	APPLIB_EXPORT_TO_PRIVATE	This privilege allows a user to export a virtual machine template to another private datacenter.	X
Export a virtual machine template to public cloud region	APPLIB_EXPORT_TO_PUBLIC	This privilege allows a user to export a virtual machine template to another public cloud region.	X
Manage virtual appliance specs	MANAGE_VAPP_SPEC	This privilege allows a user to manage virtual appliance specs (add and edit)	X
Download VM templates from remote repository	APPLIB_DOWNLOAD_FROM_REMOTE_REPOSITORY	This privilege allows a user to download virtual machine templates from remote repositories	X	X
Specify allocation of template disks	APPLIB_DISK_ALLOCATION	This privilege allows a user to specify the allocation of template disks	X
Accept virtual machine template terms of use	APPLIB_ACCEPT_IMAGE_TERMS	This privilege allows a user to accept virtual machine template terms of use	X	X
Users privileges
GUI Label _________________	Application Tag	Privilege____________________________________	Cloud Admin	Ent Admin	Ent User	Ent Viewer	Info
Access Users view	USERS_VIEW	This privilege allows a user to access the Users view	X	X
Manage enterprises	USERS_MANAGE_ENTERPRISE	This privilege allows a user to manage enterprises (add, edit and delete)	X
Manage users	USERS_MANAGE_USERS	This privilege allows a user to manage users (add, edit and delete)	X	X
Manage users of all enterprises	USERS_MANAGE_OTHER_ENTERPRISES	This privilege allows a user to manage users of more than one enterprise and move users between enterprises. Without it, the Enterprise list is not shown in Users view	X
No VDC restriction	USERS_PROHIBIT_VDC_RESTRICTION	Normally a user within an enterprise can have a list of VDCs assigned and these will be the only VDCs that they will be able to see. Setting this privilege exempts a user from having their VDC list restricted and they will be able to see all VDCs in their enterprise	X	X
Access Roles and Scope screens	USERS_VIEW_PRIVILEGES	This privilege allows a user to access the Roles and Scopes screen	X
Manage roles	USERS_MANAGE_ROLES	This privilege allows a user to manage roles (add, edit and delete roles; modify privileges assigned to roles; assign scopes to roles)	X
Associate role with enterprise	USERS_MANAGE_ROLES_OTHER_ENTERPRISES	This privilege allows a user to associate a role with any enterprise	X
Manage global role	USERS_MANAGE_SYSTEM_ROLES	This privilege allows a user to manage roles that are common and available to all enterprises, rather than being constrained to a single enterprise	X
Display connected users	USERS_ENUMERATE_CONNECTED	This privilege allows a user to display connected users	X
Define enterprise manager	USERS_DEFINE_AS_MANAGER	This privilege defines a user as an enterprise manager. Enterprise managers receive physical machine notification emails	X	X
Manage Chef enterprises	USERS_MANAGE_CHEF_ENTERPRISE	This privilege allows a user to enable and manage Chef for enterprises	X
Manage scopes	USERS_MANAGE_SCOPES	This privilege allows a user to manage scopes (add, edit and delete scopes)	X
Manage enterprise reserved servers	USERS_MANAGE_RESERVED_MACHINES	This privilege allows a user to manage reserved servers at enterprise level	X
Modify enterprise theme	USERS_MANAGE_ENTERPRISE_BRANDING	This privilege allows a user to manage enterprise branding (select a specific theme for an enterprise)	X
Allow user to push own metrics	USERS_PUSH_METRICS	This privilege allows a user to push their own metrics	X	X	X
Manage provider credentials	USERS_MANAGE_CREDENTIALS	This privilege allows a user to manage provider credentials (add and delete)	X
Manage user applications	USERS_MANAGE_APPLICATIONS	This privilege allows a user to manage applications (add and delete)	X
Manage reseller enterprises	ENTERPRISE_MANAGE_RESELLER	This privilege allows a user to manage resellers	X
Manage key node enterprises	ENTERPRISE_MANAGE_KEY_NODE	This privilege allows a user to manage aggregation nodes	X
Manage enterprise properties	ENTERPRISE_MANAGE_PROPERTIES	This privilege allows a user to manage enterprise properties	X
Manage user allowed CIDRs	MANAGE_USER_CIDR_ACCESS	This privilege allows a user to manage allowed CIDRs for users	X
Manage virtual datacenter roles	USERS_MANAGE_VDC_ROLES	This privilege allows a user to manage virtual datacenter roles (select default role, define user exceptions)	X
Access budgets section	BUDGET_VIEW	This privilege allows a user to access the budgets section	X
Manage budgets	BUDGET_MANAGE	This privilege allows a user to manage budgets (create, edit and delete)	X
Manage role and scope allowed CIDRs	MANAGE_ROLE_AND_SCOPE_CIDR_ACCESS	This privilege allows a user to manage allowed CIDRs for roles and scopes	X
Manage mail server for reseller	ENTERPRISE_MANAGE_SERVER_MAIL	This privilege allows a user to manage server mail for resellers	X
Manage user creation in provider	ENTERPRISE_CREATE_USER_IN_PROVIDER	This privilege allows a user to manage user creation in a provider (in credentials list)	X	X
Access user metadata (dashboards)	USERS_VIEW_USERS_METADATA	This privilege allows a user to access users metadata (dashboards)	X
Manage user metadata (dashboards)	USERS_MANAGE_USERS_METADATA	This privilege allows a user to manage users metadata (dashboards)	X
Access enterprise metadata (dashboards)	USERS_VIEW_ENTERPRISE_METADATA	This privilege allows a user to access enterprise metadata (dashboards)	X
Manage enterprise metadata (dashboards)	USERS_MANAGE_ENTERPRISE_METADATA	This privilege allows a user to manage enterprise metadata (dashboards)	X
System configuration privileges
GUI Label _________________	Application Tag	Privilege____________________________________	Cloud Admin	Ent Admin	Ent User	Ent Viewer	Info
Access Configuration view	SYSCONFIG_VIEW	This privilege allows a user to access the Configuration view	X
Modify configuration data	SYSCONFIG_ALLOW_MODIFY	This privilege allows a user to edit all system-wide configuration settings	X
Allow access to reports	SYSCONFIG_SHOW_REPORTS	This privilege allows a user to access external reports by clicking the Reports button. The button will only be visible if the 'Reports URL' system property is not empty (Configuration -> System Properties -> General -> Reports URL)	X
Manage default dashboards	SYSCONFIG_MANAGE_DEFAULT_DASHBOARDS	This privilege allows a user to manage default dashboards	X
Pricing privileges
GUI Label _________________	Application Tag	Privilege____________________________________	Cloud Admin	Ent Admin	Ent User	Ent Viewer	Info
Add a cost code when editing a VM template	APPLIB_VM_COST_CODE	This privilege allows a user to select a cost code when editing a virtual machine template	X
Access Pricing view	PRICING_VIEW	This privilege allows a user to access the Pricing view	X
Manage pricing	PRICING_MANAGE	This privilege allows a user to manage pricing components (add, edit and delete currencies, pricing models and cost codes)	X
Manage pricing credentials	MANAGE_PRICING_CREDENTIALS	This privilege allows a user to manage pricing credentials	X	X
Generate billing	RUN_BILLING	This privilege allows a user to generate billings	X	X
Events privileges
GUI Label _________________	Application Tag	Privilege____________________________________	Cloud Admin	Ent Admin	Ent User	Ent Viewer	Info
Display all events for current enterprise	EVENTLOG_VIEW_ENTERPRISE	This privilege allows a user to display all events related to the current enterprise	X	X	X	X
Display all events	EVENTLOG_VIEW_ALL	This privilege allows a user to display all events	X
Control privileges
GUI Label _________________	Application Tag	Privilege____________________________________	Cloud Admin	Ent Admin	Ent User	Ent Viewer	Info
Access alarms section	USERS_VIEW_ALARMS	This privilege allows a user to access the alarms sections	X
Manage alarms	USERS_MANAGE_ALARMS	This privilege allows a user to manage alarms (create, edit and delete)	X
Access alerts section	USERS_VIEW_ALERTS	This privilege allows a user to access the alerts sections	X
Manage alerts	USERS_MANAGE_ALERTS	This privilege allows a user to manage alerts (create, edit and delete)	X
Access action plans, schedule and alert trigger tabs	ACTION_PLAN_VIEW	This privilege allows a user to access the Action plans, the Schedule and Alert trigger tabs	X
Manage action plans and task schedules	ACTION_PLAN_MANAGE	This privilege allows a user to manage action plans, schedule and alert triggers	X
View enterprise hierarchy	ENTERPRISE_VIEW_HIERARCHY	This privilege allows the user to display the enterprises in a hierarchy	X
Access resource tags tabs and resource tags management view	TAGS_VIEW	This privilege allows the user to display the Tags tab of resources and the Tags management view	X
Manage tags for compatible resources	TAGS_MANAGE	This privilege allows the user to manage tags for compatible resources (add, edit, synchronize and delete)	X

Key to Info Column of Privileges Table

= new privilege
= changed privilege
= deprecated privilege

Privileges

Home privileges

Infrastructure privileges

Virtual datacenters privileges

Virtual appliances privileges

Apps library privileges

Users privileges

System configuration privileges

Pricing privileges

Events privileges

Control privileges