Service - GlobalAccessGroup

Class
VMware.Hv.GlobalAccessGroup
See also
GlobalAccessGroupBase, GlobalAccessGroupId, GlobalAccessGroupInfo
Since
Horizon 8.2


Service Description

Information about a global access group. This primarily represents a hierarchical storage concept for global entities like global entitlements, on which to base admin user permissions. For instance, an admin with root global access group permissions could interact with global entitlement assigned to any global access group under that root.

Methods

Methods defined in this Service
GlobalAccessGroup_Create, GlobalAccessGroup_Delete, GlobalAccessGroup_Get, GlobalAccessGroup_List

GlobalAccessGroup_Create

Add a new global access group. Delete/create should be used instead of update. Only global access groups with root as a parent are supported.

Privileges

Privilege Description
FOLDER_MANAGEMENT Global Access group management privilege on the new access group's parent or its ancestors is required to create an access group.

Parameters

NameTypeDescription
_thisManagedObjectReference A reference to the GlobalAccessGroup used to make the method call.
baseGlobalAccessGroupBase

attributes needed to add a global access group

Return Value

Type Description
GlobalAccessGroupIdunique identifier

Faults

Type Description
EntityNotFoundThrown if any specified entity cannot be found.
InsufficientPermissionThrown if the user does not have sufficient permission to perform the operation.
InvalidArgumentThrown if any specified argument is invalid.
InvalidTypeThrown if the type of any specified argument is invalid.
UnexpectedFaultThrown if an unexpected error occurs while performing the operation.

Events

Event Description
ADMIN_GLOBAL_FOLDER_ADDED Sent when successfully creating a global access group.

Show WSDL type definition



GlobalAccessGroup_Delete

Delete a given global access group. Global access group can be deleted only if it is not in use (across PODs).

Privileges

Privilege Description
FOLDER_MANAGEMENT Global Access group management privilege on the specified global access group or its ancestors is required to delete a global access group.

Parameters

NameTypeDescription
_thisManagedObjectReference A reference to the GlobalAccessGroup used to make the method call.
entityIdGlobalAccessGroupId

Id of the global access group to delete.

Return Value

Type Description
None

Faults

Type Description
EntityNotFoundThrown if any specified entity cannot be found.
InsufficientPermissionThrown if the user does not have sufficient permission to perform the operation.
InvalidArgumentThrown if any specified argument is invalid.
InvalidTypeThrown if the type of any specified argument is invalid.
UnexpectedFaultThrown if an unexpected error occurs while performing the operation.

Events

Event Description
ADMIN_GLOBAL_FOLDER_DELETED Sent when successfully deleting a global access group

Show WSDL type definition



GlobalAccessGroup_Get

Get a global access group by Id.

Privileges

Privilege Description
GLOBAL_PERMISSION_VIEW Read access to permissions is sufficient to read any global access group. This is also necessary to read permissions that belong to the specified global access group.
FOLDER_VIEW Read access to a specific global access group or its ancestors is necessary to read a global access group without the above privilege.

Parameters

NameTypeDescription
_thisManagedObjectReference A reference to the GlobalAccessGroup used to make the method call.
idGlobalAccessGroupId

Global Access group id.

Return Value

Type Description
GlobalAccessGroupInforequested global access group entity.

Faults

Type Description
EntityNotFoundThrown if any specified entity cannot be found.
InsufficientPermissionThrown if the user does not have sufficient permission to perform the operation.
InvalidArgumentThrown if any specified argument is invalid.
InvalidTypeThrown if the type of any specified argument is invalid.
UnexpectedFaultThrown if an unexpected error occurs while performing the operation.

Show WSDL type definition



GlobalAccessGroup_List

List all global access groups.

Privileges

Privilege Description
GLOBAL_PERMISSION_VIEW Read access to permissions is sufficient to read all global access groups. This is also necessary to read permissions that belong to a global access group.
FOLDER_VIEW Read access to a specific global access group or its ancestors is necessary to read a global access group without the above privilege.

Parameters

NameTypeDescription
_thisManagedObjectReference A reference to the GlobalAccessGroup used to make the method call.

Return Value

Type Description
GlobalAccessGroupInfo[]The global access groups.

Faults

Type Description
EntityNotFoundThrown if any specified entity cannot be found.
InsufficientPermissionThrown if the user does not have sufficient permission to perform the operation.
InvalidArgumentThrown if any specified argument is invalid.
InvalidTypeThrown if the type of any specified argument is invalid.
UnexpectedFaultThrown if an unexpected error occurs while performing the operation.

Show WSDL type definition