Roles in vcenter
Role assignment at least in my use case if very important in terms of an enterprise product such as vcenter. These roles can be combined with an Active Directory Group and applied to vsphere objects such as network and vm folders such that a given student can only access the networks and the virtual machines they have access to. In the case where multiple students need access such as in the case of a group project, we can use AD groups to facilitate that or someone can manually add 1 students to another student's VM and Network folders. This is sometimes faster.