PowerProtect Data Manager 19.11 Virtual Machine User Guide

PDF

Additional privileges required for a dedicated vCenter user account to use Transparent Snapshot Data Mover

You can use the vSphere Client to specify the required privileges for the dedicated vCenter user account, or you can use the PowerCLI, which is an interface for managing vSphere.

The following table includes the additional privileges required to use the Transparent Snapshot Data Mover (TSDM) for virtual machine protection operations. For the remaining privileges required for the dedicated vCenter user account, see Specify the required privileges for a dedicated vCenter user account.

Table 1. Minimum required vCenter user account privileges
Setting	vCenter 7.0.3 and later required privileges	PowerCLI equivalent required privileges
Datastore	Datastore > Browse datastore Datastore > Low level file operations	$privileges = @( 'Host.Config.Patch', 'Host.Config.Image', 'Host.Config.NetService', 'Datastore.FileManagement', 'Datastore.Browse', 'vSphereDataProtection.Protection', 'vSphereDataProtection.Recovery', 'System.Read', 'Task.Create', 'Task.Update' ) New-VIRole -Name 'PowerProtect' -Privilege (Get-VIPrivilege -Id $privileges)
Host	Configuration > Image configuration Configuration > Security profile and firewall Configuration > Query patch
System	System > Read
Tasks	Tasks > Create task Tasks > Update task
vSphere Data Protection	Protection Recovery