Verifying permissions for VMware communication

Users must have sufficient privileges to collect all the data from the VM managers for VMware. The user must have at least read-only rights to all VMs on which the agents are running.

Before you begin

You can verify whether users have sufficient privileges in the VMware Infrastructure Client. The user must have the correct access privileges for VMs on which the endpoints are running, and for the hosts of the VMs. If a user has insufficient privileges, agents return a No VM Manager Data status.

To collect the data required for an Oracle audit from the VMware VM manager (vCenter or ESXi), the user account in the vCenter or ESXi must have read permission for all elements in the virtualization hierarchy. For more information on configuring VM Managers for collecting Oracle auditing data, refer to Configuring VM Managers.

This procedure describes how to enable read-only rights for all elements in a virtual topology. Read-access is required only to the VMs on which the endpoints are running and to hosts of these VMs. However, the easiest way to set access permissions is to configure read-only access for all elements in a virtual topology.

Procedure

  1. To extend the privileges for the user, log in to VMware Infrastructure Client with a user that has administrator rights.
  2. Right-click on the left bar and choose Hosts and Clusters.
  3. Go to Permissions tab, right-click anywhere in the section, and then click Add Permission.
  4. In the Assign Permissions panel, click Add, choose the user, and then click OK.
  5. Choose Read-Only as an Assigned Role.
  6. Select the Propagate to Child Objects check box, and click OK.