There has been a request from VMware’s customers to provide an inventory of roles and permissions that are available in a given VMware virtual infrastructure setup. vSphere Client currently allows users to see which principal has which permissions on a particular managed entity and a list of the active roles. It does not enable users to list the permissions given to a principal. VMware Permissions Tool (VPT) is a command line tool that helps vCenter users to query the permissions given to a particular principal. VPT has the following features:
- Lists group membership of a principal in a given security domain.
- List of roles with privileges associated with each role.
- Lists all the permissions assigned to a principal.
Windows XP and above, 32/64-bit OS
It is really simple to install. Follow the instructions below:
- Copy the VPT.exe file to the destination folder that you chose.
- Install OpenSSL libraries. VPT uses libeay32.dll and ssleay32.dll that comes with OpenSSL.
- Get the following files from your legal copy of vCenter and copy them to the same directory that you copied the VPT.exe file.
More details are in the pdf file: