Buenos días,
Os subo un script para añadir permisos al vcenter y crear un rol especifico. La única pega que le pongo es que al tener que ir a preguntar al dominio puede tardar un poco en agregar los usuarios, depende de cuantos tengáis que incluir. Pero por otro lado si tenéis varios entornos donde aplicar los mismos permisos es bastante útil y te quita de errores u olvidos de algún permiso.
CLS
#### Pregunta a que vcenter te quieres conectar
$VC = Read-Host "Introduce el vcenter donde quieras configurar los permisos"
write-host Conectando al vCenter $vc
Write-Host ==> Revisamos permisos en vCenter CS PRO -foregroundcolor green
Connect-VIServer $vc -User Administrator@vsphere.local -Password "********"
#### Solucion para el lenguaje
$si = get-view ServiceInstance
$sm = Get-View $si.Content.SessionManager
$sm.SetLocale("en_US")
#### Creamos los roles
Write-Host "Creamos el rol de NETBACKUP"
Write-Host " "
New-VIRole -Name "Netbackup" -Privilege "Allocate space","Browse datastore","Configure datastore","Low level file operations","Update virtual machine files","Update virtual machine metadata","Cancel task","Disable methods","Enable methods","Global tag","Licenses","Log event","Manage custom attributes","Set custom attribute","Settings","Advanced settings","Storage partition configuration","Assign network","Assign vApp to resource pool","Assign virtual machine to Resource pool","Create task","Update task","Add virtual machine","Assign resource pool","Assign vApp","Create","Add existing disk","Add new disk","Add or Remove device","Advanced","Change resource","Disk change tracking","Disk lease","Modify device settings","Raw device","Remove disk","Set annotation","Settings","Swapfile placement","Unlock virtual machine","Power Off","Power On","Create New","Create from existing","Register","Remove","Unregister","Allow disk access","Allow read-only disk access","Allow virtual machine download","Create snapshot","Remove Snapshot","Revert to snapshot"
#### Asignamos permisos a los roles.
<#
SI TENEIS PROBLEMAS CON EL -Entity CAMBIARLO POR "Datacenters"
#>
#Read-only
New-VIPermission -Entity "Centros de datos" -Principal "DOMINIO\USUARIO" -Role Readonly -Propagate:$true
#Administrator
New-VIPermission -Entity "Centros de datos" -Principal "DOMINIO\USUARIO" -Role Admin -Propagate:$true:$true
#NetBackup
New-VIPermission -Entity "Centros de datos" -Principal "DOMAIN\USUARIO_BACKUP" -Role NetBackup -Propagate:$true
#### Información de los permisos
Write-Host "Permisos actuales" -foregroundcolor green
Write-Host " "
Get-VIPermission | select Principal,Role,Propagate | Format-Table
#### Desconectamos vCenter CS PRO
Write-Host "<== Desconectamos de $vc" -foregroundcolor green
Disconnect-VIServer -Server $vc -Force -Confirm:$false
Un saludo.