Assign a User Account the Role on a single Object

Remember that this permission only needs to be assigned to a single object to allow our user account the ability to enumerate users and groups. For this example, we’ll use the Epiphany Site Collector virtual machine and assign permissions to it, but you could also use an empty folder, powered-off virtual machine, or any other object within vSphere.

Navigate to Inventory and choose any object. Right click on that object and select “Add Permission”

In the Add Permission dialog, enter our newly created user account, and assign it the newly created role. Do NOT select the “propagate to children” check box. This assigns our user the permissions designated within that Role to that object only.

In the Permissions page for that object, validate that our user has the assigned permissions.