Create custom roles with specific permissions and assign users to those roles based on the principle of least privilege. This ensures users only have access to the resources and functions necessary for their job.

Configuration Steps:

1. Login to HCI navigate to System > Administrators and Permissions > Permissions.
2. Click Add New Account to create a new permission profile (role). Fill in the name and description. There are 3 roles here.

• System admin: permissions on resource management and partial permissions on system administration.

• Security Admin: permissions on user and authority management

• Audit Admin: permissions on management of operation logs

Then select the group you want put the new role in and fill in the password.

If you create a new system admin role, you can define the Resource Permissions & Quota by clicking the Settings button.

• Click the Physical Resources tab, select the needed storage, and modify their Permissions to the permissions added above.

• Click the Virtual Resources tab, select the needed VMs, and modify their Permissions to the permissions added above.

• Click the Resource Quota tab, configure the CPU, memory, and storage quotas for the agentless backup account, and click OK to create the account. If the quota is too low, VMs may be unable to be created.