Configuring VMware Permissions

You can run a PowerShell script to create a role in vSphere with the permissions that are required to perform Commvault Cloud operations.

Before You Begin

Verify that the machine where you run the script has PowerShell installed.
Verify that the machine where you run the script has VMware PowerCLI installed.

Install a version of PowerCLI that is compatible with the version of the vCenter Server. For more information, see VMware Product Interoperability Matrices and the "Installing VMware PowerCLI" section in the PowerCLI 11.5.0 User's Guide.
Copy the CreateCVRole.ps1 script and the CVPermissions.txt file to a computer that can connect to the vCenter server.
As needed for your requirements, modify the CVPermissions.txt file to add or remove permissions.
If you use a self-signed certificate with vSphere, run the following command before you create the vSphere role:
```
Powershell.exe Set-PowerCLIConfiguration -InvalidCertificateAction Ignore -Scope User
```

From the command line, go to the folder that contains the script and the permissions file.
Run the following command:
```
 
powershell.exe -file CreateCVRole.ps1 -Role "role_name" -Server "vcenter_server_fqdn"
```
where the following parameters are specific to your environment:
- role_name: The name of the role to create in vSphere.
- vcenter_server_fqdn: The fully qualified domain name of the vCenter server.
Log on to vSphere and verify that the role has been created.
Associate the role with one or more vSphere users.