How to Create a Delegated Administrator User Role in VMM
Updated: May 13, 2016
Applies To: System Center 2012 SP1 - Virtual Machine Manager, System Center 2012 R2 Virtual Machine Manager, System Center 2012 - Virtual Machine Manager
Use this procedure to create a Delegated Administrator user role in Virtual Machine Manager (VMM).
Account requirements Administrators and delegated administrators can create a Delegated Administrator user role. Delegated administrators can create Delegated Administrator user roles that include a subset of their scope, library servers, and Run As accounts.
To create a Delegated Administrator user role
In the Settings workspace, on the Home tab in the Create group, click Create User Role.
In the Create User Role Wizard, enter a name and optional description for this Delegated Administrator user role. Click Next to continue.
On the Profile page, select Delegated Administrator, and then click Next.
On the Members page, click Add to add user accounts and Active Directory groups to the user role with the Select Users, Computers, or Groups dialog box. After you have added the members, click Next.
On the Scope page, select private clouds or host groups for this Delegated Administrator, and then click Next. A delegated administrator differs from an administrator by having a defined scope in which the delegated administrator can make changes.
On the Library servers page, click Add to select one or more library servers with the Select a Library server dialog box. Click OK to select a server, and then click Next.
On the Run As accounts page, click Add to open the Select a Run As account dialog box. Select one or more accounts and click OK to add the account to the Run As accounts page.
Use the Ctrl key to select multiple accounts.
Click the Create Run As Account button to access the Create Run As Account dialog box.
After selecting accounts, click Next to continue.
Review the settings you have entered and then click Finish to create the Delegated Administrator user role.
After you create a delegated administrator, you can change Members, Scope, Library servers, and Run As accounts in the Properties dialog box for the Delegated Administrator user role.