70-247 Series: Part 22

Configure the Fabric (27%)

Configuring Self-Service in VMM

VMM Self-Service Users can create, deploy and use virtual machines and services that are made available via Virtual Machine Manager Private Clouds.

Self-Service Users are grouped into Roles. Roles are made up of the following categories:

  • A - Actions users can take
  • I - Interface options available
  • R - Resources and Run-As accounts available to users

Actions That Self-Service Users Can Take

In VMM 2012, users can deploy resources to Private Clouds. Previously this was limited to Host Groups. Self-Service Users can create their own templates and profiles if they are assigned the Author Action. Self-Service Users can Deploy resources if they are assigned the Deploy action. This can be limited to templates only by assigning the Deploy (From Template Only) action.

Ways that Self-Service Users Can Work with the Interface

Self Service users can use the VMM Console or the VMM Command Shell. If a Self-Service User is a member of multiple roles, they can open multiple console sessions and switch between the sessions using Ctrl + Tab.

Ways That Resources and Run As Accounts Can Be Made Available to Self-Service Users

Self-Service Users can be assigned the following:

  • Hardware Profiles
  • Guest Operating System Profiles
  • Virtual Machine Templates
  • Application Profiles
  • SQL Server profiles
  • Service Templates

Create a Self Service User Role

Pre-create the following before creating a User Role in VMM:

  • A global group for the users to belong to
  • A path on the Library Share for the Role's resources to be stored in

clip_image001

clip_image002

clip_image003

clip_image004

clip_image005

clip_image006

The data path must be unique. In the screenshot below, I show the root directory, this will not work. Use the folder you pre-created.

clip_image007

clip_image008

clip_image009

clip_image010

How to create a new session using a different user role

I've created a user called Blake Jones. I gave him two user roles, one called Blake and one called Blake 2. When he connects to VMM, either using File -> Connect or by opening the VMM Console using a shortcut, he will be asked which Role to use.

clip_image011

Sharing Resources

Sharing is automatic between group members that are assigned the same role. To enable sharing between roles, the "Share" action must be selected. The receiving Role, must have the "Receive" action assigned.

To share a resource using the VMM Console, right click an object and select the Access tab

clip_image012

Popular posts from this blog

Get local computer UUID/GUID using Windows Powershell

Use the following syntax to get the local computer's UUID/GUID using Windows Powershell: get-wmiobject Win32_ComputerSystemProduct  | Select-Object -ExpandProperty UUID Add -computername after the WMI class to find a remote computer's UUID, example: get-wmiobject Win32_ComputerSystemProduct -computername RANTPC | Select-Object -ExpandProperty UUID
Read more

gPLink and gPOptions

gPLink is a property for sites, domains and organisational units that contains a prioritised list of GPOs linked to the node. gPOptions is a property that contains all Block Policy Inheritance settings for the node. To manage GPO links on a node, you must have read and write access to the gPLink and gPOptions properties.
Read more

PSLoggedOn Getting Started on Windows Server 2008 R2

Image
PSLoggedOn is a tool I downloaded to allow me to find out which computers a user is currently logged on to. Getting it up and running wasn’t exactly easy. I’m running a Windows Server 2008 R2 test environment. The first error I encountered was: Error browing network: The list of servers for this workgroup is not currently available. Note: I kept the spelling mistake from the error message to make it easier to find via search engines. To get past this error, you have to enable and start the “Computer Browser” service. Then I started getting the error telling me that the Administrator is not logged on. That’s simply not true because I am logged onto another server (Name: ELARA): I turned the firewall OFF OFF OFF (It is a test network after all). I enabled Network Discovery and to do that I went on a service starting frenzy: DNS Client, Function Discovery Resource Publication, SSDP Discovery, and UPnP Device Host, Computer Browser After all that, I ran the script against the se
Read more