| Resource | Restriction Type | Description |
|---|
| Org Networks | by bucket | The vCloud user can manage org networks which reside in the network zone associated with vCD bucket. |
| vApps | by user group | The vCloud user can manage only vApps which run in the vCloud organization (user group). |
| vApp Templates | by user group | The vCloud user can manage only vApp templates in the vCloud organization (user group). |
| Catalogs | by user group | The vCloud user can manage only vApp template catalogs in the vCloud organization (user group). |
| vDCs | by user group | The vCloud user can manage virtual DataCenters which exist in the vCloud Organization (user group). |
| vDC Storage Profiles | by user group | The vCloud user can manage Storage profiles associated with virtualDataCenters in the vCloud Organization (user group). |
| vCloud Credentials | by user group | The vCloud users can manage vCloud credentials only of those users, who are assigned to their vCloud organization (user group). |