We are running into a problem we can't seem to find a resolution for.
We have Vcenter running off AD. We have each user setup to have thier own pool and folder.
If we set the user to read-only and they create a datastore, that datastore gets created in the root/default directory. Because the users have readonly access, they cannot move that datastore to their folder, thus they cannot continue the process of creating a vm or powering it on.
How do we resolve this to allow user to ONLY create a datastore in their own pool, and not have access to others datastores/vms/folders/pools?