
Permission
Allows Assignee To
Rationale/Comments
Pool management
•Set pool properties (naming, default SRs)
•Enable, disable, and configure
HA
•Set
•Enable, disable, and configure Workload Balancing (WLB)
•Add and remove server from pool
•Emergency transition to master
•Emergency master address
•Emergency recover slaves
•Designate new master
•Manage pool and server certificates
•Patching
•Set server properties
•Configure server logging
•Enable and disable servers
•Shut down, reboot, and
•System status reports
•Apply license
•Live migration of all other VMs on a server to another server, due to either WLB, Maintenance Mode, or HA
•Configure server management interfaces
•Disable server management
•Delete crashdumps
•Add, edit, and remove networks
•Add, edit, and remove PBDs/ PIFs/VLANs/Bonds/SRs
•Add, remove, and retrieve secrets
This permission includes all the actions required to maintain a pool.
Note: If the management interface is not functioning, no logins can authenticate except local root logins.
12