Dell PowerFlex Appliance with PowerFlex 3.x Administration Guide

Create a user in managed mode

Use this procedure to create VMware vCenter role with required permissions to run PowerFlex Manager in managed mode. You can create a role using the default permissions or selecting granularly defined permissions.

1. To do default:
   1. Log in to VMware vSphere client, select Administration > Users and Groups.
   2. Click Add User to create a user account and enter the username and password.
   3. In root view of the VMware vSphere client, click Administration and select Roles.
   4. Click Hosts and Clusters and right-click the VMware vCenter.
      1. Choose Add permission and select the user account previously created.
      2. Select the name of the role you created and check Propagate to children.
   5. Log in to PowerFlex Manager.
   6. Click Settings and create a new credential of type vCenter.
      NOTE:Ensure the username and password coincide with the vSphere credentials created earlier.
   7. Create a user credential for the vCenter server that matches the account created in vCenter earlier.
   8. Add the vCenter server object to the inventory using those credentials from PowerFlex Manager. For more information on the PowerFlex Manager credential creation see the PowerFlex Manager online help.
2. To do more granular permissions:
   1. Log in to VMware vSphere client, select Administration > Users and Groups.
   2. Click Add User to create a user account and enter the username and password.
   3. In root view of the VMware vSphere client, click Administration and select Roles.
   4. Create a new role and select the following permissions:

      Category	Permissions to select
      Alarms	Acknowledge alarm Create alarm Disable alarm action Modify alarm Remove alarm Set alarm status
      Permissions	Modify permission Modify privilege Modify role Reassign role permissions
      AutoDeploy	Host AssociateMachine Image Profile Create Edit Rule Create Delete Edit RuleSet Activate Edit
      Certificates	Manage certificiates
      Certificate Management	Create/Delete (Admins priv) Create/Delete (below Admins priv)
      CNS	Searchable
      Content Library	Add library item Create a subscription for a published library Create local library Create subscribed library Delete library item Delete local library Delete subscribed library Delete subscription of a published library Download files Evict library item Evict subscribed library Import storage Probe subscription information Publish a library item to its subscribers Publish a library to its subscribers Read storage Sync library item Sync subscribed item Type introspection Update configuration settings Update files Update library Update library item Update local library Update subscribed library Update subscription of a published library View configuration settings
      Content	Add disk Clone Decrypt Direct Access Encrypt Encrypt new Manage KMS Manage encryption policies Manage keys Migrate Recrypt Register VM Register host
      dVPort group	Create Delete IPFIX operation Modify Policy operation Scope operatin
      Distributed switch	Create Delete Host operation IPFIX operation Modify Move Network I/O control operation Policy operation Port configuration operation Port setting operation VSPAN operation
      Datacenter	Create datacenter Move datacenter Network protocol profile configuration Query IP pool allocation Reconfigure datacenter Release IP allocation Remove datacenter Rename datacenter
      Datastore	Allocate space Browse datastore Configure datastore Low level file operations Move datastore Remove datastore Remove file Rename datastore Update virtual machine files Update virtual machine metadata
      ESX Agent Manager	Config Modify View
      Extension	Register extension Unregister extension Update extension
      External stats provider	Register Unregister Update
      Folder	Create folder Delete folder Move folder Rename folder
      Global	Act as vCenter Server Cancel task Capacity planning Diagnostics Disable methods Enable methods Global tag Health Licenses Log event Manage custom attributes Proxy Script action Service managers Set custom attribute Settings System tag
      Health update provider	Register Unregister Update
      Host	CIM CIM interaction Configuration Advanced settings Authentication Store Change PciPassthru settings Change SNMP settings Change data and time settings Change settings Connection Firmware Hyperthreading Image configuration Maintenance Memory configuration NVDIMM Network Configuration Power Quarantine Query patch Security profile and firewall Storage partition configuration System Management System resources Virtual machine autostart configuration Inventory Add host to cluster Add standalone host Create cluster Modify cluster Move cluster or standalone host Move host Remove cluster Remove host Rename cluster Local operations Add host to vCenter Create virtual machine Delete virtual machine Manage user groups Reconfigure virtual machine vSphere Replication Manage replication
      vSphere Tagging	Assign or Unassign vSphere tag Create vSphere tag Create vSphere tag category Delete vSphere tag Delete vSphere tag category Edit vSphere tag Edit vSphere tag category Modify UsedBy Field for Category Modify UsedBy Field for Tag
      Network	Assign network Configure Move network Remove
      Performance	Modify intervals
      Host Profile	Clear Create Delete Edit Export View
      Resource	Apply recommendation Assign vApp to resource pool Assign virtual machine to resource pool Create resource pool Migrate powered off virtual machine Migrate powered on virtual machine Modify resource pool Move resource pool Query vMotion Remove resource pool Rename resource pool
      Scheduled task	Create tasks Modify task Remove task Run task
      Sessions	Impersonate user Message Validate session View and stop sessions
      Datastore cluster	Configure a datastore cluster
      Profile-driven storage	Profile-driven storage update Profile-driven storage view
      Storage views	Configure service View
      Tasks	Create task Update task
      Transfer service	Manage Monitor
      vApp	Add virtual machine Assign resource pool Assign vApp Clone Create Delete Export Import Move Power off Power on Rename Suspend Unregister View OVF environment vApp appliacation configuration vApp instance configuration vApp managedBy configuration vApp resource configuration
      VMware vSphere Update Manager	Configure Configure service Manage baseline Attach baseline Manage baseline Manage Patches and Upgrades Remediate to Apply Patches, Extensions. and Upgrades Scan for Applicable Patches, Extensions, and Upgrades Stage Patches and Extensions View Compliance Status Upload file Upload upgrade images and offline bundles
      Virtual machine	Change Configuration Acquire disk lease Add existing disk Add new disk Add or remove device Advanced configuration Change CPU count Change Memory Change Settings Change Swapfile placement Change resource Configure Host USB device Configure Raw device Configure managedBy Display connection settings Extend virtual disk Modify device settings Query fault tolerance compatibility Query unowned files Reload from path Remove disk Rename Reset guest information Set annotation Toggle disk change tracking Toggle fork parent Upgrade virtual machine compatibility Edit Inventory Create from existing Create new Move Register Remove Unregister Guest operations Guest operation alias modification Guest operation alias query Guest operation modifications Guest operation program execution Guest operation queries Interaction Answer question Backup operation on virtual machine Configure CD media Configure floppy media Connect devices Console interaction Create screenshot Defragment all disks Drag and drop Guest operating system management by VIX API Inject USB HID scan codes Install VMware Tools Pause or Unpause Perform wipe or shrink operations Power off Power on Record session on virtual machine Replay session on virtual machine Reset Resume Fault Tolerance Suspend Suspend Fault Tolerance Test failover Test restart Secondary VM Turn off Fault Tolerance Turn on Fault Tolerance Provisioning Allow disk access Allow file access Allow read-only disk access Allow virtual machine download Allow virtual machine files upload Clone template Clone virtual machine Create template from virtual machine Customize guest Deploy template Mark as template Mark as virtual machine Modify customization specification Promote disks Read customization specifications Service configuration Allow notifications Allow polling of global event notifications Manage service configurations Modify service configuration Query service configurations Read service configuration Snapshot management Create snapshot Remove snapshot Revert to snapshot vSphere Replication Configure replication Manage replication Monitor replication
      vSAN	Cluster ShallowRekey
      vService	Create dependency Destroy dependency Reconfigure dependency configuration Update dependency

   5. Assign a name to the new role.
   6. Click Hosts and Clusters and right-click the VMware vCenter.
      1. Choose Add permission and select the user account previously created.
      2. Select the name of the role you created and check Propagate to children.
   7. Log in to PowerFlex Manager.
   8. Click Settings and create a new credential of type vCenter.
      NOTE:Ensure the username and password coincide with the vSphere credentials created earlier.
   9. Create a user credential for the vCenter server that matches the account created in vCenter earlier.
   10. Add the vCenter server object to the inventory using those credentials from PowerFlex Manager. For more information on the PowerFlex Manager credential creation see the PowerFlex Manager online help.