Hello there,
I know vcenter way of handling permissions is really weird (I'm being nice) but I can't get it to work correctly with tags...
From what I understand, users need the assign tag permission on vcenter level but then are able to edit tags on any objects... Even objects where they have specific role "read only" they still can add or remove tag on this object.
There is also an option to "add permission" on categories and tags, but you can't display thoses "added" permissions and still does not correct the main problem : if a user has right to assign/remove a tag on an object, it has right to do so on any object.
The use case is we have Veeam and use tags to select which VMs are being backed up. We have different teams and each team have its own VMs.
It is not acceptable that member of Team A can modify tags of VMs belonging to Team B.
But I don't find a way to do so, if anyone could give me some hints about that...
Thanks !