| Resource | Restriction Type | Description |
|---|
| Org Networks | By bucket resources | The vCloud user can manage org networks, which reside in the network zone associated with VCD bucket. |
| vApps | By user group | The vCloud user can manage only vApps which run in the vCloud organization (user group). |
| vApp Templates | By user group | The vCloud user can manage only vApp templates in the vCloud organization (user group). |
| Catalogs | By user group | The vCloud user can manage only vApp template catalogs in the vCloud organization (user group). |
| vDCs | By user group | The vCloud user can manage virtual DataCenters which exist in the vCloud Organization (user group). |
| vDC Storage Profiles | By user group | The vCloud user can manage Storage profiles associated with virtual DataCenters in the vCloud Organization (user group). |
| vCloud Credentials | By user group | The vCloud users can manage vCloud credentials only of those users, who are assigned to their vCloud organization (user group). |