Control access to persistent storage features

Enterprise administrators can manage persistent volumes, which are located on external storage. When the user undeploys or detaches a volume, the data is intact and the user can attach the volume to another VM. This feature requires a public cloud provider that supports volumes, such as AWS or Azure.

Default access to volumes feature

By default enterprise administrators can access this feature on the Volumes tab in Virtual datacenters or through the API.

Open

And the user can add volumes to a VM by editing the VM on the Storage tab and dragging available volumes into the Storage list.  Note that the Volumes heading will continue to display even after the privilege is removed.

Open

Control access to volumes feature

It is easy to remove access to this feature by removing privileges that are present in the default enterprise administrator role.

To disable the display of the Volumes tab so that the user cannot manage persistent volumes.

• Remove the Manage virtual storage elements privilege from the enterprise administrator role