vim_permission

vCenter object permissions via SOAP AuthorizationManager.

A permission is a (entity, principal, role, propagate, group) tuple attached to a managed object. SOAP is the only path — REST doesn’t expose Set/RetrieveEntityPermissions in VCF 9.x.

saltext.vcf.clients.vim_permission.list_(opts, entity_ref, inherited=True, profile=None)

Return permissions attached to entity_ref.

When inherited is True (default) permissions propagated from parent objects are included.

saltext.vcf.clients.vim_permission.set_(opts, entity_ref, principal, role, propagate=True, group=False, profile=None)

Set or update a single permission on entity_ref.

role is the role’s symbolic name ("Admin", "ReadOnly", or a custom-role name).

saltext.vcf.clients.vim_permission.remove(opts, entity_ref, principal, group=False, profile=None)

Remove the (principal, group) permission from entity_ref.

saltext.vcf.clients.vim_permission.reset(opts, entity_ref, profile=None)

Reset all non-inherited permissions on entity_ref (rare; use with care).