ESXi 6.0 need to assign roles to user permission to access using WEB-UI

nagendra

i dont have Vcenter...

Emad R

its ok you dont need vcenter

that other user needs VMRC (VMware Remote Console) client installed on his machine

Then after install he will need to run the following:

Under Windows:

"C:\Program Files (x86)\VMware\VMware Remote Console\vmrc.exe" vmrc://USERNAME@ESXIHOST:443/?moid=VMID

You also need to port forward port 443 +902 + 903 on ESXi.

Also you need to create new user and give him admin permissions on the VM you wish for him to connect, but not admin on the ESXi server.

And thats it, the VMRC is much better than the web.

you can create new user using the ESXi web front end, afterwards go to any VM and edit its permission and add that user to it.

The VM ID can be determined from the web URL that gets presented when you click the VM on the ESXi host.

nagendra

but the user who needs access to VM is using linux, but i cant give him admin access..
i can only give him access to particular VM where he can restart,shutdown and suspend.

IRJ

@nagendra said in ESXi 6.0 need to assign roles to user permission to access using WEB-UI:

but the user who needs access to VM is using linux, but i cant give him admin access..
i can only give him access to particular VM where he can restart,shutdown and suspend.

There are windows RDP clients for Linux. This may be your best bet. Lock down the permissions at the VM level and give him RDP access.

nagendra

@irj ok he can shutdown in RDP .but how does how start the PC ???

IRJ

@nagendra said in ESXi 6.0 need to assign roles to user permission to access using WEB-UI:

@irj ok he can shutdown in RDP .but how does how start the PC ???

Ok. I didn't see that listed as a requirement.

With vsphere, this task is relatively simple.

nagendra

yah but for linux (centos) we dont have client application ... do we have ??

dbeato

@nagendra said in ESXi 6.0 need to assign roles to user permission to access using WEB-UI:

yah but for linux (centos) we dont have client application ... do we have ??

Maybe you can use the Vsphere roles
https://docs.vmware.com/en/VMware-vSphere/6.0/com.vmware.vsphere.security.doc/GUID-18071E9A-EED1-4968-8D51-E0B4F526FDA3.html
https://docs.vmware.com/en/VMware-vSphere/6.0/com.vmware.vsphere.security.doc/GUID-93B962A7-93FA-4E96-B68F-AE66D3D6C663.html

nagendra

thanks @dbeato but i dont have vcenter as well.

IRJ

It seems like you may be stuck with giving local admin rights and RDP access or implementing a completely different solution

IRJ

How big of a deal is it if he can't startup or shutdown the VM? I'd put a restart script on his desktop in case he needs it and completely disable shutdown. Of course with local admin rights he could potentially bypass it, but it will prevent an accidental shutdown.

nagendra

@IRJ i can give him the access to webgui its working for root login as we have other VM's which is not related to his department ... am just trying to give me a same webgui access with limited function...

Unsolved ESXi 6.0 need to assign roles to user permission to access using WEB-UI