
There has been a request from VMware’s customers to provide an inventory of roles and permissions that are available in a given VMware virtual infrastructure setup. vSphere Client currently allows users to see which principal has which permissions on a particular managed entity and a list of the active roles. It does not enable users to list the permissions given to a principal. VMware Permissions Tool (VPT) is a command line tool that helps vCenter users to query the permissions given to a particular principal. VPT has the following features:
Lists group membership of a principal in a given security domain.
- List of roles with privileges associated with each role.
- Lists all the permissions assigned to a principal.
Features & Usage of Permissions Tool
http://labs.vmware.com/flings/vpt