Hello All
I have been looking for a way to script the permissions on a tag object to allow user to assign tags to their VMs.
Reading Permissions on Tag Objects with global rights I can set the permission on a tag object via the web console in vSphere 6.5 but i want to restrict it to certain tags for certain groups. As you can imagine this can take a while when you have a few tags to assign.
I have been looking for a 'Get/New/Set/Remove-TagPermissions' but all that I found is set global permission https://www.virtuallyghetto.com/2017/03/automating-vsphere-global-permissions-with-powercli.html
The current process im following is
Login to the Web console as a global Administrator
Under Home I go to 'Tag & Custom Attributes'
Select Categories
Right click the Name I want to add permissions to and select 'Add Permissions'
Select the simplified role I have created that only has 'Assign or Unassign vSphere Tag'
Click Add under 'Users and groups' and add all the Groups I want to have the access with 'propagation to children' un-selected
Now under these Categories I select the Tag that I want the individual group to have access to and give them the same permission