Administration delegation in Hyper-V
There are two ways to delegate administration of Hyper-V server. If you are using SCVMM, use SCVMM to do it. If not, AzMan (Authorization Manager) is your best Friend.
How to run AzMan? Type AzMan.msc in run box.
After you start Azman, you will have to open a store for delegation configuration. There is xml file on every server with Hyper-V role installed called InitialStore.xml. It’s located in %ProgramData%\ProgramData\Microsoft\Windows\Hyper-V. So, when you run AzMan for the first time, you will have to choose this file.
How?
- Open AzMan (start/run/azman.msc)
- Right click on Authorization manager in the left tree of your mmc console and choose Open Authorization Store. Click OK
AzMan UI is simple to use.
There are 34 operations you can allow access for your users, like for instance, Allow Virtual Machine Snapshot, Connect Virtual Switch Port, Reconfigure Service etc. Play around if you want to customize specific tasks to your users or give them full admin access to hyper-V services.
