Assign User Global Permissions using vSphere Client

Assign User Global Permissions

In this blog, I will assign user global permission to FQDN active directory administrator user account to access VMware vCenter instead of administrator@vsphere.local account.
1- Log in with your VMware vSphere Client, typing vCenter username and password.

2- Select the menu tab and click on administrator option.

3- On your left-hand side under Access Control, select Global Permission and click the + icon.

4- From the Domain drop-down box, select an active directory domain (xpertstec.local).

5- From the User/Group option, type administrator and then select administrator.

6- Select Administrator under role.

7- Choose Propagate to children checkbox and then click OK.

8- Now you can see FQDN successfully added, so select administrator@vsphere.local and then click Logout.

9- Type local domain username, password and then click login.

10- Login with the active directory domain administrator account.

How to assign user read only permissions

I already created Active Directory account user name Jamil to assign permissions on vSphere objects using this same account. Here I will set read-only permission for the user name Jamil. Or you can allow Jamil users to perform basic tasks such as powering on or rebooting a virtual machine.
1- Login with your VMware vSphere Client, select the menu tab, and click on the administrator option.