Prevent VM provisioning from the Content Library

Hi All,

I need to prevent VM provisioning from the Content Library for a user.

However, it looks like the operation 'Deploy OVF template' is run by VSPHERE.LOCAL\vpxd-<GUID> account. As a result, the user is able to provision a new VM regardless removing the following role privileges:

• Virtual machine.Inventory.Create new
• Virtual machine.Inventory.Create from existing
• And all privileges in Virtual machine.Provisioning.

The problem exists for both vSphere 6.0 and 6.5.

I was wondering if anyone ran across this issue before and has any ida about the workaround.

Regards,