Restricting access Virtualization Summary

If your ESX hosts are managed through your vCenter, whatever credentials and the view permissions associated with those credentials provided to Orion when adding the node is what's accessible through the Virtualization tab.

What exactly is the use case you're trying to achieve? Maybe there's another different/better way to go about this in Orion. Are you trying to restrict who can see which ESX hosts in Orion? Are you trying to restrict/limit which VM Guests each Orion user can see?

Yes, I am trying to restrict the guests that can be viewed per user. Want to have views per application system which is composed of multiple servers, etc.

You can use the account limitations to restrict what users have access to view in the Virtualization tab, though inheritance of the tree structure to access the guests will still be visible, but users will not be able to click on any objects in the tree they don't have access for to view more details. Also, any unmanaged/unmonitored VM guests will also be visible in the Virtualization tab regardless of view/account limitations.  

Remember, you can also remove the Virtualization tab for users and manage the guest VMs as normal host nodes. This may be simpler/easier for users to understand.

Before Account Limitation

Create New Account Limitation restrictions to a single node "lab-solaris10"

After Account Limitations

Hope this helps.

It works but you have to enable management of the ESX host object as well. I tried that just on a hunch and it started giving the view I needed.