Basic privilege setting mode
You must have the edit_role/ edit_role_any
privilege to edit role settings on the system.
The basic privilege configuration mode allows you to quickly configure privileges for a role by specifying one of the pre-defined permission sets.
For Shared resources(AirCloud resources that the user does not own), these are:
a. "No access" - there will be no access to the resource for the role. Users with this role cannot view or modify the resource in any way. New users and groups are assigned this role by default.
b. "View access" is a set of privileges that gives the user the right to only view information about a system resource without the ability to use it or make any changes to its configuration. Users with this role can view the resource status and information about the resource. For example, users with this role can view virtual machine, host, and resource pool attributes, but cannot view the remote console for the host. All menu and toolbar actions are prohibited.
c. "View & Edit" - In addition to viewing, this permission group has the ability to use the system resource and customize it to perform any tasks, create child resources in the hierarchy. Users with this role can view and perform all actions (except deleting) on the object. This role also includes all the privileges of theView accessrole.
d. "Full access" - Full access to manage the resource with the ability to delete the resource.
For Personal resources:
a. "Can't create" - There is no permission to create personal resources for the role.
b. "Can create (with limits)" - The possibility of creating personal resources for the role is available, but it is subject to restrictions set by the system administrator.
By personal resources we mean those resources created by the user in the AirCloud object hierarchy. For such resources, the user is assigned the system role "Owner".
For more information about customizing restrictions for user access, see " "Customizing user access restrictions".