I have a fully functional, completely working vCenter 6 environment. Admin users can log in and see the entire inventory, as they're supposed to.
However, I have a number of business users that need restricted permissions in a subfolder in the inventory. I have added a new role to vCenter with the permissions they need, and applied that role for that user to the specific subfolder.
Now: those users are not supposed to see any other folders in the inventory tree above of on the same level in the tree, just their own folder.
Before I upgraded to vCenter 6 (appliance), I had it working fine. With vCenter 6, this model broke: the users only see the 'empty inventory' text in the 'VMs and Templates' view.
Weird thing is: when that same user browses to 'vCenter Inventory Lists', clicks 'Virtual Machines', he sees his own (and only his own) VM and can interact with it in accordance with his permissions.
So it seems there's a new permission needed in vCenter to see only that part of the Inventory tree applicable to a specific user, but I (1) haven't found that permission yet and (2) wouldn't even know to which object in the tree to assign the permission
Any thoughts?