vSphere权限管理模型

理解vpx user用户的作用

By default, when ESX/ESXi is installed, the only user that exists is the root user, and

root has full administrative permissions to the entire server. This default set of

permissions changes when an ESX/ESXi host is managed by vCenter Server. The

process of adding a host to vCenter Server adds an agent (the vCenter Server

Agent) and an additional Service Console account called vpxuser. The vpxuser

account has a 32-character, complex, randomly generated password that is also granted

membership in the Administrator role on an ESX/ESXi host. This assignment enables

the vCenter Server service to carry out tasks on the ESX/ESXi hosts in the inventory.

vCenter管理和维护权限的优势

1.中心的权限管理

2.可以利用域用户

3.可以利用数据中心，文件夹，资源池来指派权限

4. VM和Template通过部门来组织，Host和Cluster通过地理位置来组织

Step1: 可以在vcenter 中创建新的角色

Step2:关联权限与用户组

再用vmoperator用户登入进去只能看到一个esxi host

本文转自 bilinyee博客，原文链接：     http://blog.51cto.com/ericfu/1663209   如需转载请自行联系原作者