PowerProtect Data Manager Appliance 5.16.0.0 Virtual Machine User Guide

• Create alarm
• Modify alarm

$privileges = @(
'System.Anonymous',
'System.View',
'System.Read',
'Alarm.Create',
'Alarm.Edit',
'Authorization.ModifyPermissions',
'Cryptographer.AddDisk',
'Cryptographer.Access',
'Cryptographer.Encrypt',
'Cryptographer.Migrate',
'Cryptographer.RegisterVM',
'Datastore.Rename',
'Datastore.Move',
'Datastore.Delete',
'Datastore.Browse',
'Datastore.DeleteFile',
'Datastore.FileManagement',
'Datastore.AllocateSpace',
'Datastore.Config',
'Extension.Register',
'Extension.Unregister',
'Extension.Update',
'Folder.Create',
'Global.ManageCustomFields',
'Global.SetCustomField',
'Global.LogEvent',
'Global.CancelTask',
'Global.Licenses',
'Global.Settings',
'Global.DisableMethods',
'Global.EnableMethods',
'Host.Config.Patch',
'Host.Config.Image',
'Host.Config.NetService',
'Host.Config.Storage',
'InventoryService.Tagging.AttachTag',
'InventoryService.Tagging.ObjectAttachable',
'InventoryService.Tagging.CreateTag',
'InventoryService.Tagging.CreateCategory',
'Network.Config',
'Network.Assign',
'Resource.AssignVMToPool',
'Resource.HotMigrate',
'Resource.ColdMigrate',
'Sessions.ImpersonateUser',
'Sessions.Message',
'Sessions.ValidateSession',
'Sessions.ViewandStopSessions',
'StorageProfile.Update',
'StorageProfile.View',
'System.Read',
'Task.Create',
'Task.Update',
'VApp.ApplicationConfig',
'VApp.Export',
'VApp.Import',
'vSphereDataProtection.Protection',
'vSphereDataProtection.Recovery',
'VirtualMachine.Config.Rename',
'VirtualMachine.Config.Annotation',
'VirtualMachine.Config.AddExistingDisk',
'VirtualMachine.Config.AddNewDisk',
'VirtualMachine.Config.RemoveDisk',
'VirtualMachine.Config.RawDevice',
'VirtualMachine.Config.HostUSBDevice',
'VirtualMachine.Config.CPUCount',
'VirtualMachine.Config.Memory',
'VirtualMachine.Config.AddRemoveDevice',
'VirtualMachine.Config.EditDevice',
'VirtualMachine.Config.Settings',
'VirtualMachine.Config.Resource',
'VirtualMachine.Config.UpgradeVirtualHardware',
'VirtualMachine.Config.ResetGuestInfo',
'VirtualMachine.Config.AdvancedConfig',
'VirtualMachine.Config.DiskLease',
'VirtualMachine.Config.SwapPlacement',
'VirtualMachine.Config.DiskExtend',
'VirtualMachine.Config.ChangeTracking',
'VirtualMachine.Config.ReloadFromPath',
'VirtualMachine.Config.ManagedBy',
'VirtualMachine.GuestOperations.Query',
'VirtualMachine.GuestOperations.Modify',
'VirtualMachine.GuestOperations.Execute',
'VirtualMachine.Interact.PowerOn',
'VirtualMachine.Interact.PowerOff',
'VirtualMachine.Interact.Reset',
'VirtualMachine.Interact.ConsoleInteract',
'VirtualMachine.Interact.DeviceConnection',
'VirtualMachine.Interact.SetCDMedia',
'VirtualMachine.Interact.ToolsInstall',
'VirtualMachine.Interact.GuestControl',
'VirtualMachine.Inventory.Create',
'VirtualMachine.Inventory.Register',
'VirtualMachine.Inventory.Delete',
'VirtualMachine.Inventory.Unregister',
'VirtualMachine.Provisioning.DiskRandomAccess',
'VirtualMachine.Provisioning.DiskRandomRead',
'VirtualMachine.Provisioning.GetVmFiles',
'VirtualMachine.Provisioning.MarkAsTemplate',
'VirtualMachine.State.CreateSnapshot',
'VirtualMachine.State.RevertToSnapshot',
'VirtualMachine.State.RemoveSnapshot',
'VirtualMachine.State.RenameSnapshot',
)

New-VIRole -Name 'PowerProtect' -Privilege 
(Get-VIPrivilege -Id $privileges)

• Add disk
• Direct Access
• Encrypt
• Migrate
  NOTE:This privilege applies only to virtual machines that are enabled with Microsoft virtualization-based security (VBS) or Virtual Trusted Platform Module (vTPM).
• Register VM

• Allocate space
• Browse datastore
• Configure datastore
• Low level file operations
• Move datastore
• Remove datastore
• Remove file
• Rename datastore
• Update virtual machine files
• Update virtual machine metadata

• Register extension
• Unregister extension
• Update extension

• Create folder

• Cancel task
• Disable methods
• Enable methods
• Licenses
• Log event
• Manage custom attributes
• Set custom attribute
• Settings

• Configuration > Image configuration
• Configuration > Query patch
• Configuration > Security profile and firewall
  NOTE:These privileges are required by the Transparent Snapshots Data Mover (TSDM) for vSphere Installation Bundle (VIB) install, update, and uninstall operations. If Auto VIB management is enabled in the Infrastructure > Protection Engines window, operations might be inconsistent.
• Configuration > Storage partition configuration

• Assign network
• Configure

• Modify permission

(for SPBM policy restore in vCenter versions 7.0 U3 and earlier)
  

• Profile-driven storage update
• Profile-driven storage view

(for SPBM policy restore in vCenter versions 8.0 and later)
  

• Update VM storage policies
• View VM storage policies

• Assign virtual machine to resource pool
• Migrate powered off virtual machine
• Migrate powered on virtual machine

• Impersonate user
• Message
• Validate session
• View and stop sessions

• Read
  NOTE:This privilege is required to use TSDM for virtual machine protection operations. The privilege is not visible in the vSphere Client client, but it is automatically assigned when a new role is created with the client. If PowerCLI is used for privilege assignment, the privilege must be explicitly assigned.

• Create task
• Update task

• Export
• Import
• vApp application configuration

• Protection
• Recovery

• Assign or Unassign vSphere Tag
• Assign or Unassign vSphere Tag on Object
  NOTE:This only applies to vCenter 7.0 and later.
• Create vSphere Tag
• Create vSphere Tag Category

• Acquire disk lease
• Add existing disk
• Add new disk
• Add or remove device
• Advanced configuration
• Change CPU count
• Change Memory
• Change Settings
• Change Swapfile placement
• Change resource
• Configure Host USB device
• Configure Raw device
• Configure managed by
• Extend virtual disk
• Modify device settings
• Reload from path
• Remove disk
• Rename
• Reset guest information
• Set annotation
• Toggle disk change tracking
• Upgrade virtual machine compatibility

• Create new
• Register
• Remove
• Unregister

• Guest operation modifications
• Guest operation program execution
• Guest operation queries

• Configure CD media
• Connect devices
• Console interaction
• Guest operating system management by VIX API
• Install VMware Tools
• Power off
• Power on
• Reset

• Allow disk access
• Allow read-only disk access
• Allow virtual machine download
• Mark as template

• Create snapshot
• Remove snapshot
• Rename snapshot
• Revert to snapshot

• Update VM storage policies
• View VM storage policies