Should I the privilege-"VirtualMachine.Interact.PowerOff".

My requirement is to check if the user running the script got Priviledge to turn off a computer virtual-"VirtualMachine.Interact.PowerOff". How can I check this?

I am able to make groups of users with permissions on my virtual machine, but impossible to get the PRIVILEGE - I have to check if I have the privilege of 'VirtualMachine.Interact.PowerOff' on myVM and then take action.

Connect-Viserver & lt; viServer & gt;

$si = get-view ServiceInstance

$am = $si.content.authorisationManager

$myVM = get - VM & lt; myVM & gt; Get-View

$perm = $am. RetrieveEntityPermission ($myVM.MoRef, $true)

$perm

-


Outout-


Entity: VMware.Vim.ManagedObjectReference

Main: users

Group: true

RoleId: 156

Spread: true

DynamicType:

DynamicProperty:

-


How to get the privileges for users? or control user got a specific privilege

Thank you

Isn't better to use the effectiveRole property.

There is no need to call the RetrieveEntityPermissions method, given that the system that has already done for you.

Something like this for example?

$am = get-view (Get-View ServiceInstance).Content.AuthorizationManager
$myVM = Get-VM testVM | Get-View

foreach($effRole in $myVM.EffectiveRole){
     foreach($role in $am.RoleList){
          if ($role.RoleId -eq $effRole){
               foreach($priv in $role.Privilege){
                    if($priv -eq "VirtualMachine.Interact.PowerOff"){
                         Write-Host "User has power off permission"
                    }
               }
          }
     }
}

Tags: VMware

Similar Questions

  • Why this session should not connect to the privileged forum?

    Grid Infrastructure/DB Version: 11.2.0.3

    Platform: RHEL 5.8

    We have a 3-node cluster and I configured the RAC PKDS_UAT_01 service with its privileged as a JDSCFS3 instance

    $ srvctl config service s PKDS_UAT_01 d JDSCFS

    Service name: PKDS_UAT_01

    The service is activated

    Server pool: JDSCFS_PKDS_UAT_01

    Cardinality: 1

    Disconnect: false

    The service role: PRIMARY

    Management policy: AUTOMATIC

    DTC transaction: false

    Notifications of AQ HA: fake

    Failover type: NONE

    Failover method: NONE

    TAF failover attempts: 0

    TAF failover time: 0

    Objective connection of balancing: LONG

    Goal of balancing Runtime: NO

    Governed by a policy JOB: NONE

    Edition:

    Favorite instances: JDSCFS3

    Available forums: JDSCFS1

    So I start a session remotely through SQL * Plus love

    sqlplus scott / tiger@rtfms-scan:1624/PKDS_UAT_01.acproot.net

    When I check in the comic book, it shows that the session is actually connected to instantiate 1 despite the privileged forum defined as Instance3 (JDSCFS3) for the PKDS_UAT_01 service

    SQL > select INST_ID select sid from gv$ session where username = 'SCOTT ';

    INST_ID SELECT SID

    ---------- ----------

    1 3839

    Why is this happening?

    1. check that all the services are running on all nodes. In fact, service you must run only on preferred node

    service d db_name srvctl status

    2 restart the services

    3. try again

    Concerning

    Ed

  • Username with the privilege level 15 bypass activation

    Hi experts,

    I guess I never really understand the process of authentication on Cisco routers and devices lol. In any case I want users privilege level 15 in order to be implemented in enable mode immediately after the connection, without having to type in the 'enable' command and activate the password. Users with other levels of privilege will still put in EXEC mode.

    AAA must be enabled because I use it as well for 802. 1 x.

    The privilege level will be eventually affected by the Radius Server, but at the moment, that the user is created locally on the switch. Right now I have:

    AAA new-model

    !

    username admin privilege 15 secret 5 $1$ $2bdl VIp53G4/zpo4f9aHh.t5v0
    cisco secret 5 $1$ GDDS username $ ehTUzwappJFMxgA7tM/YW.
    !

    line vty 0 5
    access-class 100 in
    exec-timeout 30 0
    Synchronous recording
    entry ssh transport

    And this isn't work lol. No matter, I login with "admin" or "cisco", I am put in EXEC mode. What should I do to achieve this?

    Thank you!

    On the issue of the cisco device the below listed order

    AAA authorization exec default local radius group

    On the radius if server the ACS or IAS

    The attribute of type of service like this

    service-type = administrative

    In doing so, the user will be beginning of landing in mode exec privileges #.

    Kind regards

    Jousset

    The rate of useful messages-

  • How to give the privilege for the task to the role or named users

    I am for the first time using dbms_scheduler instead of dbms_job.

    We have a situation where multiple users have privilege to run and change / delete a created with dbms_scheduler job.

    The job is running and I'm able to administer as a creator/owner there but is not able to grant privileges to other users.

    I executed:

    -Grant create any job to < user

    -Grant manage scheduler < user >
    but without success.

    When reading the documentation is seems it should be possible to grant privilege on work using alter < user > my_job grant but I don't get that ORA-00990: missing or invalid privilege

    I tried to use dbms_scheduler.create_job.
    What do I have to use dbms_scheduler.create_program?
    With the help of 11.2.0.2.0 (linux)
    I missed something fundamental?

    Regards Niclas Eklund

    Hi Niclas,

    Yes, you can grant the privilege to alter on a job. As pointed Asy, maybe you just forgot the key word WE?

    That being said, the privilege of CREATING a TASK also allows you to edit any job. However, this privilege is very powerful, so you should be very careful before you give him.

  • Get the vCAC:VCACHost of the vCAC:VirtualMachine

    I don't know if I'm just being dense and missing something obvious, but it doesn't seem like the vCAC:VirtualMachine object has no way to enter the vCAC:VCACHost delegate.  I created an action that I think should work for most objects.  In a similar way to vCD, I had assumed that most of the objects would have a .parent attribute or a function to get the host.  At the moment I can't imagine we ever have more than one vCACHost in a vCO to be honest, but you know how it goes.  I wrote this action to return to the vCAC:VCACHost, but if there is a way more easy/better please let me know.

    If (vCACVm! = null) {}

    var vmParentId = vCACVm.getEntity () .hostId;

    var host = Server.findAllForType ("vCAC:VCACHost");

    System.log ("number of vCACHosts found:" + hosts.length);

    {if (hosts)}

    for each {(host var in hosts)

    System.log ("Comparing hostId:" + host.id + "-VM managed by id:" + vmParentId);

    If (host.id == vmParentId) {}

    System.log ("looks at" + host.displayName + "is a game!");

    Back home;

    }

    }

    }

    }

    Hi Paul,.

    Your action works. It could be reduced to:

    host = Server.findForType("vCAC:VCACHost", vCACVm.getEntity().hostId);
    

    Christophe.

  • Change the privileges of the user of the operating system in application


    Hello

    Oracle Fusion Middleware 11 GR 1 material

    WebLogic Server 11 GR 1 material PS4

    We have a security problem that we cannot solve. In application the trigger BUTTON WHEN PRESSED, we open the .pdf on remote server using web.show_document documents. We are in need to restrict access to documents only by the application. To explain. The user should not be able to access the file somehow, but by application on the key. For the moment, we are in little trouble, because the user can access the document by using the address bar in the browser or just type the address in the browser. I am aware that this issue has more with OS privileges as any parameter of Oracle. I would like to know is there a way to restrict the privileges of the user at least OS at the OS level and grant access to the user through the Oracle application?

    Kind regards

    S Pax

    If you want to completely on app I see two different ways.

    1 put the files on a share on your application server and make them off-limits via http. To view a file, it load to the client through the WEBUTIL_FILETRANSFER.AS_TO_CLIENT of WEBUTIL and display it using CLIENT_HOST.

    2 put the files in a database table. To view a file, load it to the customer through the WEBUTIL_FILETRANSFER of WEBUTIL. DB_TO_CLIENT and show it using CLIENT_HOST.

  • Should I the "intego personal backup" on my new drive of lace

    Should I the "intego personal backup" on my new drive of lace? I just want to copy music than I do in my logic music program.

    I would also like to know the best way to copy my music from my old lacie drive to my new. Thanks for your help!

    The best way is to use Time Machine (installed natively with Mac OSX). Its as simple as turning on Time Machine via the Mac system preferences and selecting your new Lacie drive as backup destination.  Depending on what model of mac you have the thunderbolt peut port not to go to the "standby" and Lacie drive (or possibly any other drive connected by thunderbolt) will continue to run while you will need to keep "non-montage" (eject, not physically well). This 'non-montage' can be done via disk utility which is located by clicking on Launchpad.

    To work around the small annoying problem is that you will need to use a USB connection which should put it off, but the transfer rate may be slower.

  • Satellite P300 - 219 PSPCCE - what should be the optimal heat of CPU?

    Hello there;

    I use for my laptop Satellite P300-219 (PSPCCE) newly bought about a week now. When you type I can't help noticing, the place where I put my left hand, I want to say the empty space to the left of the touchpad, feels much too hot. I looked for the manual and I have learned that it is where the CPU.

    Then I searched for a way to measure the heat of CPU, and after having tested some programs with too many different measures, I led to believe that the 'CPUID hardware Manager"gives the best results, after you set the correct value TJUNCTION.

    Here are the steps I get today while typing this message:

    ACPI hardware monitor
    Temperature 0 45note ° C (112 ° F) [0xC6E] (THRM)

    Intel Mobile Core 2 Duo T6400 hardware monitor
    Temperature 0 56a ° C (° F 132a) 0 x [31] (Core #0)
    Temperature 1 54a ° C (° F 129a) 0 x [33] (Core #1).

    Monitor hardware ATI Mobility Radeon HD 3650
    53A temperature 0 ° C (° F 127a) (GPU Core)

    Hardware Hitachi HTS543232L9S monitor
    Temperature 0 37â? Â ° C (98A? Â ° F) (0 x 25) (Assembly)

    From now you mind, windows taskbar indicates that I use roughly about 15 & 35% CPU. After a little use, I even though the CPU heats by a maximum of 69a ° C.

    The truth is, I don't know what to do with these readings, is my laptop which works very well, or he has problems? Could someone please tell me what should be the optimal level of heat for a P300, or where I can learn?

    Thanks in advance.

    Hello

    In my opinion, everything is ok with your laptop, buddy and the temperatures are quite good. Don t be to worry about this!
    If your laptop could overheat, it would have to close or freeze immediately. If this isn't the case, everything is ok with the temperatures.

    What you can do is to change the cooling method in Windows power management. Here, you change between performance and battery optimized cooling.

    By the way: you should also clean your laptop at any time. I clean my laptop every 3-4 months using a jet of compressed air. This blows the dust from the cooling fans.

    Welcome them

  • I recently buy iPhone 6 s he'S / has and unfortunately the glass of my phone was broken, is it possible to change a new and that I should pay the penalty or not? Can you help me solve this problem? Thank you

    I recently buy iPhone 6 s he'S / has and unfortunately the glass of my phone was broken, is it possible to change a new and that I should pay the penalty or not? Can you help me solve this problem? Thank you

    See http://www.apple.com/support/iphone/repair/screen-damage/.

  • Counter counts twice as many edges as it should, but the correct frequency. Why?

    Hello world

    I use a PCI-6122 (series S, DAQ - STC) and Labview 7.1 on a Windows XP.  There are only two counters on this card (0 and Ctr 1 Ctr) and I need to use both of them to count the edges.  While testing meters, I am inputing a TTL signal to 10 kHz at the door of each counter, to be used as an external sample clock, and a 20 Hz TTL signal in each counter, to serve as input signal Source.  CTR 0 account 40 edges per second, i.e. twice as much as it should, while the Ctr 1 reads the correct number of edges, i.e. 20 edges per second.

    The strange thing is that when I switch the connections of the portal and Source for two meters to measure the frequency (or period), two meter to read the correct frequency, i.e. 20 Hz.  To the best of my knowledge, the two counters have been reading of the
    correct the number of edges a couple of weeks.  Also, I have reset the
    device several times but it doesn't make a difference.  I'm trying to understand why this is happening and how to fix it, but I'm not about to answer each question.  Does anyone have any suggestions?

    Thank you.

    After many tests on mine, and talked with an engineer of NOR and repeat tests by telephone, it seems that there is something wrong with the meter (a) on the Board of Directors.  I sent it for repair (luckily it was still under warranty .)

  • What type of connections I do for the acquisition of data PCI 619 card pins? What I have to give it to the ground and the CCV on the pins of the connector myself? What should be the value of the SCR I need to give to the PIN?

    I have a PCI 6519 data acquisition card. I want to install it on the PC and use it outputs to control a robot. I have problems with the connections to the terminal block which is attached to the cable.

    What type of connections I do for the acquisition of data PCI 619 card pins? What I have to give it to the ground and the CCV on the pins of the connector myself? What should be the value of the SCR I need to give to the PIN?


  • Best free tool for rezising of partition which should support the client as a server operating system.

    Does anyone know about a free tool for other than DiskPart Disk Partition resizing? It should support the clients and servers OS.

    Hello JawadQazi,

    There are many free tools for the Partition of drive on the internet. Please search an internet. Some tools have free trials and others have a load for the tool. You will need to do research on who will provide a tool best suited to your needs.

    Thank you

    Marilyn

  • Why should keep the lid of the laptop closed when the laptop is not in use?

    Why should keep the lid of the laptop closed when the laptop is not in use?

    For energy conservation, to avoid dust and spills and damage the display.

  • S6000-H should have the FM radio. Can't find it!

    The internet offer of Lenovo, one should have the FM radio. Where is he?

    Try a search next time. But your answer is S6000 FM Radio

  • I have a corrupt user profile. Windows XP. When I add a new can be the same, or should be different. And the user's profile should match the user ID?

    Corrupted user profile

    I have a corrupt user profile.  Windows XP. When I add a new can be the same, or should be different.  And the user's profile should match the user ID?

    If the profile has recently become corrupted, you can probably get the same user by performing a system restore operation:

    "Windows XP problems if your profile is corrupted"
      <>http://support.Microsoft.com/kb/326688 >

    Otherwise, you will need to create another user and copy your data.  The simplest procedure is here:

    "How to recover damaged Windows XP user profile"
      <>http://support.Microsoft.com/kb/555473 >

    HTH,
    JW

Maybe you are looking for

  • As a person in the main video takes the floor, I want to insert an image, while the audio stays...

    I have one main video where a woman takes the floor. In his speech, I would like to continue talking while using different images that makes her disappear, but not the audio... How do I with IMovie on my IPhone?

  • What are changes to Lenovo P70 S132

    Hello What's new in the latest version i.e. S132 for Lenovo P70?

  • Backup space

    I'm running out of space on my drive D:\. I have the HP original backup files on the disc. I also have this backup on the d: drive utility programs also. Now, the disk is full. I would like to extern this player but I don't know that I can do without

  • HP laserjet M425dn MFP 400: white pages when using the copy flow tray

    Our HP laserjet MFP M425dn of 400 printer suddenly started printing blank pages when I food pages in the sandbox of copy on top of the lid and go through the routine of copy 'optimize '.  When I place the original on the glass, then select copy, copi

  • Vista and Windows Calendar

    I'm on Vista Home Premium with the latest updates and service packs and Windows Calendar. The problem is that my calendar is no longer a point, sometimes he does it on a reboot of the system. I get no error message, but I have a problem now that an o