ESXi server (5.1) level access & manage by ROLE in centeral vCenter server (5.5) instead of diff-diff / Datacenter location

I want to manage the server vCenter 5.5, with 7 data center and each data center with 2 * 5.1 Esxi servers and each server Esxi with amendments of VM, all data centers-> server Esxi in diff-diff place and managed in one main place, all Esxi datacenter servers / VM in a field.

vCenter Server - worm 5.5

Data Center 1

ESXi Server1 - 5.1

VM1-> vm10

ESXi Server2 - 5.1

VM1-> vm10

Data Center 2

ESXi Server3 - 5.1

VM1-> vm10

Server ESXi 4-5.1

VM1-> vm10

.

.

..

7 data center

ESXi Serverx - 5.1

VM1-> vm10

ESXi - 5.1 servers

VM1-> vm10

I would like to give access to database role on all esxi servers

(1) each location access and manage esxi servers / VMS than by its user admin - own data center / Esxi servers / VMs

(2) is not access any other server Esxi / VM - no access to the other data centers / Esxi servers / VMs

(3) a super user access and manage all the server vCenter / Esxi Server / VM

Kindly give best solution , requirements to implement highest point of reference.

Thanking you in advance.

Anand

(1) each location access & manage esxi servers / VMS than by its user admin - own data center / Esxi servers / VMs

Select your data center to host & cluster inventory, go to the Manage tab, under you will find authorization tab, where you should add authorization with spread to children, by selecting the account user/group and appropriate role (create custom roles if necessary).

(2) is not access any other server Esxi / VM - no access to the other data centers / Esxi servers / VMs

Suppose that the user is given with permission only on Dataceter1 in your inventory, that account has no default on any other data centers, so when permissions that the user will be able to see these inventory items where he or she has permission.

(3) a super user access and manage all the server vCenter / Esxi Server / VM

Select your vCenter Server server in host & cluster inventory, go to the Manage tab, under you will find tab permission , then you must add the permission with spread to children, by selecting the account Super user/group and appropriate role.

Tags: VMware

Similar Questions

  • Cannot access ESXi server via network

    Hello world!

    We have a HP C7000 Encolosure with 4 BL460c Gen 8 blades in front size of it. Back size of the C7000, we have 2 SAN Switch, 2 switch HP BLc GbE2c layer 2/3 and 2 Onboard Administrator Module.

    Everything is working fine with IP addresses like this:

    OA active:

    IP address: 172.16.0.253

    STANBY OA:

    IP address: 172.16.0.254

    Server Blade BL460c Bay 1:

    The IP address of the ILO: 172.16.0.10

    Server Blade BL460c Bay 2:

    The ILO IP address: 172.16.0.11

    BL460c blade Bay 9:

    The ILO IP address: 172.16.0.19

    Server Blade BL460c Bay 10:

    The ILO IP address: 172.16.0.20

    We can ping pc that connected to the port of ILO on Onboard Administrator (OA) IP addresses above. (I can it call PC MANAGE?)

    Continue, we access OA via Web https://172.16.0.253 use of , then Console integrated to control 4 Server blades. We have mounted image ESXi 5.1 U1 and successfully installed on 4 servers blade.

    We manually config IP address on each ESXi Server (like this):

    BL460c Server Blade on Bay 1 as server ESXi 1:

    IP address: 10.0.0.11

    BL460c Server Blade on Bay 2 as server ESXi 2:

    IP address: 10.0.0.12

    BL460c Server Blade on Bay 9 as a server ESXi 9:

    IP address: 10.0.0.19

    BL460c Server Blade on 10 Bay as a server ESXi 10:

    IP address: 10.0.0.20

    Now we can ping server to another server ESXi ESXi 1. I mean 4 Blade Server can ping together.

    BUT:

    -We can not ping servers to blade PC of manage (that PC connect to the port of ILO on OSTEOARTHRITIS. In this scene, MANAGE PCs has the IP 172.16.0.100/16)

    -We unplug the network cable from the port of iLO, then connect it to the port number 24 on HP BLc GbE2c LY 2/3 switch, then address IP of the PC to MANAGE the 10.0.0.100/24 value. Always the same, can only access servers

    Can someone explain to me how to access this server (ping, http, etc...). Do we have to config switch HP BLc GbE2c LY 2/3? We read many many guide on the HP website, but they have not mentioned about routing or switch to configure

    Thanks in advance!

    It's my mistake!

    My servers have 2 connections FlexLOM. That a connection has been enabled for 'network management' in ESXi. I do not understand, then I activated 2 connections. That cause outside the network can not access them.

    I just disabled a single connection and everything works perfectly.

    I thank everyone!

  • Access NAS storage of ESXi Server using VMKernel Port?

    Hello

    I would like to know the best procedure to connect to the NAS storage of ESXi host 5. I am able to connect to the NAS storage according to the screenshots listed in the link below.

    http://www.tintri.com/blog/2011/11/connecting-vSphere-to-NFS-the-easy-way/

    But, I saw different configurations in the past where port dedicated VMkernel is assigned to NAS and all storage goes into network 10 G. I try to do the same and created a VMkernel for NAS port. But I don't think that traffic is going over there as it is not used at all.

    I gave the IP address of the ESXi server on the NAS box to get access. I couldn't give address IP VMkernel sideways NAS. How can I make use of this IP VMKernel dedicated NFS storage?

    I want to implement the best way to pass NAS 10 G network traffic. In addition, How can I test if storage traffic crosses VMkernel port?

    Suggestions needed.

    Virtualinfra is right that you must use a different subnet for NFS traffic. You masked the IP range, so I don't see what you use, but make sure that the vmkernel and storage using a single subnet, not the management subnet. If you get an error, your use of a subnet that goes out the default gateway of the management port, or that you are using the same subnet.

    I wrote a few articles on the use of NFS with vSphere: http://wahlnetwork.com/2012/04/19/nfs-on-vsphere-a-few-misconceptions/

    Also, make sure that the vmnic can route traffic on that subnet, as in the case of the use of VLANs.

  • Cannot install Clean Access Manager Server/Bundle (worm: HP Server 4.0)

    Hi all

    can someone help me with the following questions I encountered during the installation of own server access/Manager in

    HP Proliant DL 360 G5

    Type: SAS

    Controller: Controller HP Smart Array P400

    a. first question is if I can install the two Clean Access Server & Manager in a HP Server

    b. after the server starts on the CD, had break showing the command "being run/sbin / loader."

    When I checked it displays "Waiting for device to be stable 20 seconds."

    c.When I tried to only install the clean access server, after loading anaconda it says "no device valid only found o to create new file systems." Plese check your hardware for the problem.

    Waiting for your valuable response for the same

    Dietsch

    CASE and CAM comes as a built... cisco devices is not like a CUCM, Manager of calls where you download the software and put it on a customizable material by you... 3300 servers come on different features... Take a look at the data sheet:

    http://www.Cisco.com/en/us/prod/collateral/vpndevc/ps5707/ps8418/ps6128/product_data_sheet0900aecd802da1b5.html

    3350 and 3390 devices support smart array E200i... and also SAS raid disk controllers...

    b. you must order at least 2 boxes/servers, one for ca and one for CAM... PAK keys/licenses are important here, because the image can be also downloaded EAC, even if you lose the CD... When you order the box, it comes with the basic settings... just for short, you need 1 CAM, 1 CASE, licenses for two then CD are common for SCS and CAM. It's just, you must select the functionlaity in the last step of the installation...

    I hope this helps... all the best...

    REDA

  • Critical of my network to new ESXi server configuration

    Hi all, I would like to see if someone sees a problem with the following configuration for 2 new servers which will join my Cluster.  I want to so 2 way balancing redundancy by using etherchannel.  I have 5 total physical NETWORK adapter each ESXi server.  Since they will be ESXi, no service console.  I intend to install NIC1 and NIC2 etherchannel and trunk of ESXi to spend blade1 in our Cisco 6509.  I intend to install NIC3 and NIC4 etherchannel and trunk of ESXi to switch module2 in our Cisco 6509.  I intend to connect 5 NIC for module1/2 in our 6509 using a VLAN dedicated to be used only for vmotion traffic.  Virtual MACHINE will be connected to a vswitch with uplinks by using etherchannel groups.  Is it a solid plan or suggest something different?  Please see the diagram attached clarification (or possibly more confusing)

    Thank you!!

    To answer your question on etherchannel, you are right when you say that you'd be using the total card network bandwidth, but you must enable IP Hash-based like politics that comes with a bit of overhead, not much but it's there.  Also, do you have VMs that require the use of more than 1Gbps of bandwidth actually?  If you go this route, if not then I would just create a Port Channel on your 6509 and add as appropriate ports to switch to this channel port then set the channel Port in trunk mode.  At this point, just use VLAN tagging on PortGroup level to mark up your traffic to your virtual machines.  If there is no need for tagging VLAN and then just set the access ports switch vlan on your pSwitches.  Then use the default NIC Teaming-> Load Balancing political originating virtual port ID.

    I have actually made vMotion and management both before.  I think it really boils down to your convenience, but I think that best practices States to separate the two.

    If you have found this helpful at all prices please points using the correct or useful!  Thank you!

  • Control an ESXi server with vSphere client on the internet?

    I work for a company who manage multiple servers, most of which run ESXi. There are times where the machine virtual which is y executed is insensitive, or the crash. When this occurs often we have no other choice than to see and access the console from a client within the network. I was wondering if it was possible for me to open a port like 12345 and move to the ESXi host, giving me access to his inventory and power VM States and all the usual stuff, only remote rather than within the network. I want to know if it's possible, and what are the ports are necessary for me to do. I am aware that you can install as a virtual machine and the remote client in this, but I prefer to keep things as they are. I just want access to host servers ESXi by opening the Client vSphere on my own machine remotely and feeding the external IP address of customers and manage that way. Thanks for your time.

    Hello..

    Yes, it is indeed possible... All the ports that are required to achieve this are listed in the KB below:

    TCP and UDP Ports required to access other network, ESX hosts and vCenter Server components

    / Rubeck

  • Setting up a Vmware ESXi Server

    I have a Tower Server certified vSphere, ESXi (5.0) I installed on a USB key without any problems.

    After installation and reboot however I'm greeted by a screen asking you to access 192.168.1.104 (assigned automatically by my network switch) to access the download tools for installing Vcenter, etc.

    Here are the best... I don't have internet connection on the network. All I have is a wireless router connected to this server, then a laptop, access to the network. When I try to access the IP address, even if I can't access even if when I ping it it comes back fine.

    Welcoem to the community - when installing ESXi and didn't assign is not an IP address by default for obtaining an IP via DHCP - how your server managed to get his IP - the next step you have to do ispoint a web browser for download vSphere client that will allow you to interact with the host via a GUI interface. -If you are unable to connect to via a browser for your host, then I looked at wireless router to make fur it's not filtering HTTP traffic.

  • ESXi 4.1 using VMware Update Manager Update

    This is my first time using Update Manager to update an ESXi host.  I have vCenter server and the Update Manager Server installed on a physical machine that has ODBC connections to a database Microsoft SQL on a computer located on my single ESXi 4.1 host virtual.  Realizing that I have to put the ESXi host in maintenance mode in order to upgrade to the latest version, I don't know how to and can continue to use vCenter Update Manager.  My only guess is that I'll have my SQL Server VM to vMotion to another ESXi host and have somehow vCenter and Manager update access to this database in order to stop the VM of the SQL Server to put the host in maintenance mode?  I tried to close the VM of SQL Server when you are connected to vCenter but I lost all ability to do something immediately.  My DC is also on that same host ESXi as well, closing the domain controller affect as well?

    If you have only an ESXi server and your VC / database etc all SimCity.EA.com ESXi host, you could consider only the upgrade without using VUM?

    http://www.get-virtual.info/2011/03/24/436/

    If your ESX host is in a cluster, the 'Miantenance Mode' operation will be vMotion virtual machines to the other hhosts and you should have no problem.

  • What are the methods to ESXi upgrade with 1 single ESXi Server?

    The server requires her to get any update through the update maintenance Manager or VMA is not possible that both run on the ESXi server.

    What options are left during a server ESXi 4.0 to ESXi 4.1? I can think of root direct-ssh access and the 'host Update Utiliy', even if that fails with errors.

    You must use the vCLI, then update the host vihostupdate.pl. Page 55 @ http://www.vmware.com/pdf/vsphere4/r41/vsp_41_upgrade_guide.pdf

    iDLE-jAM | SC 2, SC 3 & VCP 4

    If you have found this device or any other answer useful please consider useful or correct buttons using attribute points

  • Access ESXi virtual computers via Web access.

    Hi all

    I used VMWare Server 2 and like to make a desktop icon that accesses VMs via the VMWARE-VMRC. EXE plugin.  This is an attractive interface.  Is it possible to do the same with ESXi virtual machines?

    Thank you

    Rick

    No, ESXi does not support the web management interface.  Server 2.0 does, like ESX and ESXi not.

  • ACS - AnyConnect 3.0.5080 Network Access Manager (NAM) by selecting the right certificate

    Hello

    We are authenticate our users of portable Windows7 wireless using Microsoft CA issued certificates from computer to Server v4.2 ACS Cisco successfully using EAP - TLS

    However AnyConnect 3.0.5080 is installed and Network Access Manager (NAM) runs on laptops that Nam appears to be selecting details in the bad certificate for EAP - TLS authentication to the ACS server, it selects username details in a personal certificate on the computer of users that is used by LYNC 2010 and does not use the installed machine certificate.

    Newspapers of ACS that indicate this is attached.

    NAM will always use the details obtained from a personal certificate of feedback a computer certificate (if they both have the same domain name that they contain).

    Nothing specific that I should be looking.

    Thanks in advance for any help.

    No problem Jim

    If you could please update this thread as you progress, this will help a lot of customers in the future!

    Thank you

    Tarik Admani
    * Please note the useful messages *.

  • WebGate Oracle Access Manager

    Hi all

    I kinda confutation on Oracle Access Manager webgate. Please help me to understand.

    There are five web server, I need protected using OAM. Three are IIS 6.0/7.0 in Wondows 2008, Apache v2 in RHEL 5 and the other Apache Tomcat in Cent OS 5. All the BONES are the 64-bit platform.

    I need to know what webgate I download and install IIS and Apache? Please give me the download link.

    I saw after the documentation, but I'm unable to find Oracle_Access_Manager10_1_4_3_0_Win64_ISAPI_Webgate.exe or Oracle_Access_Manager10_1_4_3_0_platform_OHS_Webgate

    http://docs.Oracle.com/CD/E28271_01/ doc.1111 /e15478/apch2ihs.htm
    http://docs.Oracle.com/CD/E21764_01/ doc.1111 /e15478/iis_wg.htm

    Thank you

    Tamim Khan

    Hi Tamim khan,

    Download it from the following link:

    http://www.Oracle.com/technetwork/middleware/IAS/downloads/101401-099957.html

    Manager access Oracle 10 g - no Webgates of OHS11g and 3rd party integrations: Windows x 86 disk 2 (oam_int_win_v11_cd1.zip)

    who has both:
    Oracle_Access_Manager10_1_4_2_5_Win32_ISAPI_WebGate.exe and
    Oracle_Access_Manager10_1_4_2_5_Win64_ISAPI_WebGate.exe

    Kind regards
    Combet

  • Communicate the guests as well as the ESXi Server VCenter?

    Hello:

    We deploy a solution virtual machine using Vcenter and ESXi 4.1 the VCenter logically is in a different subnet from the ESX servers.

    Is it true that the VCenter server does not need to communicate with the IP addresses of the colleagues of the BONE... and that the vcenter needs access to the IP addresses of the ESXi servers? What (if any) features is lost if the Vcenter server talks to the ESXi ip addresses?

    Please advise and thank you,

    -Chris

    vCenter communicates only to host servers ESXi and vSphere client only connection. vCenter is unable to communicate with the virtual machine, such as the virtual machines are linked to different virtual switch that would have properties different network (vlan and etc.).

  • Unable to connect via the Internet to my ESXi server. Help, please

    Hi, I had a server ESXi 4.1 at home. When I try to connect via the Internet, it is not working.

    I put ESXi server to firewall and still, I can't ping my server even.

    No idea why?

    Kind regards

    Pawel Lenart

    Sit behind your firewall router esxi, transfer 443 to esxi management IP and ensure that management network vmkernel has the internal IP address of router as its default gateway.

    http://blog.peacon.co.UK

    Please give points for any helpful answer.

    Unofficial list of transfer USB devices work

  • LM arrive at the same ESXi server on which it is installed?

    Greetings,

    This is my first post and I am new to VMware, so go easy on me. The question is quite simple. Is it possible to Lab Manager

    to manage the ESXi server which is hosted on? It is a recommended solution, this does not create a circular dependency?

    See you soon,.

    Paul

    Yes it can. The Manager server laboratory in our environment of race on a virtual computer on the cluster manager of laboratory. Everything such as running a vcenter here (where our tracks)

    http://www.vmwareadmins.com

    http://www.vmwarescripting.com

Maybe you are looking for

  • Can't see the old records of local e-mail after El Capitan upgraded...

    So I upgraded my Mac to El Capitan friends and it's really messed up with Apple Mail!  I have others have looked at this problem, but don't seem to be getting anywhere. All my old email files stored locally, well, half has disappeared. I have re-inst

  • Pavilion g150cy: RAM for g150cy 17 "laptop

    I am wanting to upgrade the RAM on my laptop.  It came with 6 GB.  Which is the maximum it can hold?  Can I get better?  I upgraded the memory on a Dell laptop.

  • How to configure VPN 3000 Concentrator for remote access

    I have inherited a VPN concentrator and want to configure it to provide remote access to my internal laboratory network when I'm traveling.  Private interface is configured as 192.168.1.240/24.  Public interface is configured as one of my public IP a

  • Cannot delete the file because the file is in use

    So when I'm in a file Explorer window and I want to delete a PDF (for example) I have a "File in use" message.I realized that this is caused by the preview pane. No pane preview any message and deletes the file.I want to know how I can remove a file

  • Fixed layout EPUB Android questions

    Have created a fixed provision EPUB with animation and interactivity of InDesign CC. Interactivity and animation work on Apple devices, but not on Android. The reader only Android app which has opened the EPUB was play Google Books, but the animation