sigbjornl
(Sigbjorn L)
November 2, 2024, 7:40pm
1
We’re looking for a way to configure Global Permissions in vCenter. I found the community.vmware.vmware_object_role_permission module, however it does not seem to be able to configure Global Permissions.
Does a module for configuring Global Permissions exist?
jiholland
(Jørn Ivar)
November 3, 2024, 7:15am
2
I do not think that is possible:
opened 08:06PM - 09 Oct 20 UTC
feature
has_pr
##### SUMMARY
There are existing modules for managing permissions at the vCen… ter and lower levels, but this module does not appear to support Global Permissions as seen in the vCenter HTML5 interface. Using Code Capture in vCenter does not show any API requests for managing them, but online research has shown some Powershell modules that connect to the MOB of vCenter to add Global Permissions.
A new module that can replicate this action of managing Global Permissions would help make this feature complete, as with larger linked-mode vCenter installs, adding permissions as Global rather than at each vCenter is beneficial
##### ISSUE TYPE
- Feature Idea
##### COMPONENT NAME
Expand vmware_object_role_permission or create a new module
##### ADDITIONAL INFORMATION
```yaml
```
mariolenz
(Mario Lenz)
November 3, 2024, 1:28pm
3
ATM this isn’t possible. There are two PRs trying to implement this:
The problem is that there’s no official API to do this. At least, I didn’t find one yet.
Those two PRs use the MOB to implement this, but I’m doubtful that this is a good approach.
1 Like
sigbjornl
(Sigbjorn L)
November 4, 2024, 9:48am
4
Thank you for the replies. I understand the issue. Configuring permissions on the vCenter top level might be a better way to go for now.
It seem like using “object_name: rootFolder” will configure vCenter top level permissions using the existing community.vmware.vmware_object_role_permission module?
mariolenz
(Mario Lenz)
October 13, 2025, 4:46pm
5
It looks like VMware / Broadcom improved the SDKs (VMware Cloud Foundation Evolution: Unpacking PowerCLI, Software Development Kit, and API Enhancements ) a lot. So maybe we can find a better way to implement this than talking to the MOB. Implementing stuff using MOB feels somewhat fragile to me.
I’ve asked here if this would be possible.
1 Like