Aduit
Audit: Instead of VM console, use native remote management services, such as terminal services and ssh, to interact with virtual machines. Grant VM console access only when necessary. 1. From the vSphere Client, select an object in the inventory. 2. Click the Permissions tab to view the user and role pair assignments for that object. 3. Next, navigate to Administration\Roles section of vCenter. 4. Select the role in question and choose edit to see which effective privileges are enabled. 5. Only Authorized users should have a role which allows them a privilege under the Virtual Machine\Interaction section of the role editor.