---
title: "Public VCF as-a-Service - User roles"
description: "- A Public VCF as-a-Service solution"
url: https://docs.us.ovhcloud.com/en/hosted-private-cloud/public-vcf-aas/user-role
lang: en
---
> For AI agents: the complete documentation index is available at https://docs.us.ovhcloud.com/en/llms.txt, the full documentation bundle is available at https://docs.us.ovhcloud.com/en/llms-full.txt.

# Public VCF as-a-Service - User roles

## Requirements

- A [Public VCF as-a-Service](https://us.ovhcloud.com/lp/vmware-vcd-evolution/) solution
- Technical Administrator access to your [VMware vSphere on OVHcloud](https://us.ovhcloud.com/hosted-private-cloud/vmware/) solution

#### OVHcloud Control Panel Access

- **Direct link:** [Public VCF-as-a-Service](https://manager.us.ovhcloud.com/#/vmware/public-vcf-aas/)
- **Navigation path:** `Hosted Private Cloud` > `Public VCF as-a-Service` > Select your organization

 

## Instructions

### Procedure for assigning a role

1. Log in to the VCF as-a-Service portal as an Organization Admin.
2. Go to the `Administration` section.
3. Select `User` and choose the user to edit.
4. Assign the desired role from the list of available roles.

 

### Available roles

#### Catalog Author

- Publish catalogs: Can create and publish catalogs.
- Manage media: Can add and manage ISO media.
- Create vApps: Can create vApps from templates.
- No VM management: Cannot directly manage existing VMs.
- Use case: Ideal for users who need to manage catalogs and templates without accessing VMs.

 

#### Console Access Only

- Console access: Can only access the consoles of authorized VMs and vApps.
- No vApp or VM management: Cannot start, stop, or configure VMs.
- No catalog management: Cannot manage catalogs or media.
- Use case: Useful for users who only need to access VM consoles for specific tasks.

 

#### Defer to Identity Provider

**Warning:**

**NOTE:** The Identity Provider feature is not available at this time.

- Rights will be determined based on information received from the IDP.

 

#### Organization Administrator

- User and group management: Can add, edit, and delete users and groups within the organization.
- Resource management: Can manage resources allocated to the organization, such as vApps, VMs, networks, and catalogs.
- Role assignment: Can assign roles and permissions to users and groups.
- Parameter configuration: Can configure organization settings, such as backup policies, quotas, and security settings.
- Full access: Has full access to all features and resources in the organization, except those reserved for System Administrators.

 

#### vApp Author

- Create and manage vApps: Can create, edit, and delete vApps.
- Add VMs: Can add VMs to vApps.
- Configure VMs: Can configure VM settings (CPU, memory, etc.).
- No catalog management: Cannot manage catalogs or media.
- Use case: Perfect for users who need to create and manage vApps and VMs without accessing catalogs.

 

#### vApp User

- Use vApps and VMs: Can start, stop, suspend, and resume VMs.
- Console access: Can access VM consoles.
- No vApp management: Cannot create or edit vApps.
- No VM management: Cannot configure VM settings.
- Use case: Suited for users who need to use vApps and VMs without modifying them.

 

## Go further

Browse all the [Public VCF as-a-Service guides](https://docs.us.ovhcloud.com/en/hosted-private-cloud/public-vcf-aas/landing-page-public-vcf-aas.md).

Browse the rest of the [OVHcloud US documentation](https://docs.us.ovhcloud.com/en/index.md) for guides on our other products and services.

Learn more about [Hosted Private Cloud](https://us.ovhcloud.com/hosted-private-cloud/) on the OVHcloud US website.

If you need training or technical assistance to implement our solutions, contact your sales representative or click on [this link](https://us.ovhcloud.com/professional-services/) to get a quote and ask our Professional Services experts for a custom analysis of your project.