VMware Role "Resource Pool"

Hi @Gabriele Palumbo 

Thank you for the question.

A security role applied to the client that enables a user to see the content and resource pool configured will show whatever is configured there. This will be the case regardless of whether that user would be able to see or modify those items elsewhere.

The disabling “Change Content” doesn’t deny the permission (like filesystem permissions where deny takes precedence over grant), it will only prevent inheritance of the setting below.

I expect the user here is inheriting a permission from a higher level, which is granting the ability to make the change.

Try checking the box “Show Inherited” or viewing the permissions granted on the user properties to see if some other permission is affecting things from elsewhere or higher up in the Commcell.

Thanks,

Stuart

Hi all, 

I closed the previous topic by mistake.

Is it possible to create a role that allows you to browse in a vmware subclient only of a single resource pool?
When the user browses the subclient's content he must not see any other resources.

I also tried to configure a role with "Change Content" disabled, but the user is still able to change the content.

Reactivated the original thread here and closed off the duplicate.