15
Permission Allows Assignee To Rationale/Comments
Pool management Set pool properties (naming,
default SRs)
Enable, disable, and configure
HA
Set per-VM HA restart priorities
Enable, disable, and configure
Workload Balancing (WLB)
Add and remove server from
pool
Emergency transition to master
Emergency master address
Emergency recover slaves
Designate new master
Manage pool and server
certificates
• Patching
Set server properties
Configure server logging
Enable and disable servers
Shut down, reboot, and power-
on servers
System status reports
Apply license
Live migration of all other VMs
on a server to another server,
due to either WLB, Maintenance
Mode, or HA
Configure server management
interfaces
Disable server management
Delete crashdumps
Add, edit, and remove networks
Add, edit, and remove PBDs/
PIFs/VLANs/Bonds/SRs
Add, remove, and retrieve
secrets
This permission includes all the
actions required to maintain a
pool.
Note: If the primary management
interface is not functioning, no
logins can authenticate except
local root logins.