Hi all,
My vCenter is integrated with my AD and naturally my Domain Admin will be part of the Administrator group in my vCenter. But can I have my Domain Admins administer my whole vCenter but exclude them from accessing or managing only a particular vApp with few VMs (only can view). Anyone can help on this matter?