How to authorize users to monitor virtual machines

Monitoring virtual Machines

After the Hyper-V installation is complete, users of the default local Administrators group have full control over the virtual machines deployed in Hyper-V.

Normal users can start the Hyper-V manager normally, but no virtual machines appear in the list of virtual machines. For example, user "HR" is a normal user running a Hyper-V computer (as shown in the figure), when the user logs on, the Hyper-V manager is launched, and the virtual machine list shows that the logged-on user does not have administrative rights (as shown in the figure) and therefore cannot manage virtual machines (virtual machine management tasks such as Start, stop, shutdown, etc.).

Start Authorization Manager

Windows Server 2008 R2 The Virtual machine Licensing Administration snap-in does not start after the default installation is complete, and you need to manually start the management module. Add Authorization Manager through the Add/remove snap-in for MMC.

Monitoring Virtual machine Status

Monitoring virtual machine status is an important administrative task in an application environment where professional management Hyper-V virtual machines are not installed. Because of the features of Hyper-V, normal users do not have the ability to manage Hyper-V computers by default, so they need to grant the appropriate permissions to ordinary users through Authorization Manager before they can manage Hyper-V using the Hyper-V manager. Permissions are deployed to monitor all virtual machines running in the Hyper-V host. To complete the monitoring function, you need to authorize it in the Hyper-V default scope. The deployment monitoring virtual machine state process is divided into two parts:

1, define the function of monitoring needs;

2, for the target user or group authorization.

Roles required to monitor virtual machine status

The essence of the role is to manage the function of the virtual machine, all the management functions of the virtual machine are done through the role. For example, give the user the "Start virtual machine" role, and the user will have the right to start the virtual machine. To monitor virtual machine status, you need to add the following roles for the specified user (roles can be truncated as needed):

Read the service configuration.

Import virtual machines.

View the external Ethernet ports.

View the internal Ethernet port.

View the LAN endpoint.

View the switch ports.

View the switch.

View the Virtual Switch Management service.

View the LAN settings.

Defining monitoring roles

When you select Role Definition, right-click to select New role definition.