Listing resources

The list resources (computer objects) operation should be called from the top level VSphere target (one where no resourceID or parentID is specified) to give you the full list of VMs, hosts, datacenters and resource groups from the VSphere instance.

If you wanted to target a resource directly, you would use the name of the resource in the resourceID address line component. The parentID in this case should be the exact name of the target ID that you got the list of resources from.

This allows Bravura Security Fabric to manage the groups at each individual resource level (the groups being sets of VSphere permissions). Users can then request groups to be added to their accounts (group-user-add/delete operations) to get permission on specific resources; for example, when requesting the privilege to use a specific VM.

Specifying the parentID is not strictly required; although it is highly recommended, as this will allow the child targets to simply copy the top-level target’s list files rather than having to connect to the VSphere server and manually list the users and groups. If the parentID is not specified the child resource will connect to the vsphere server directly and list manually. This is especially advantageous in cases where you are going to be creating many child targets through import rules (and ending up with quite a few of them), which would generate a lot of extra calls to the VSphere server if you do not specify the parentIDs.