Should any user in AD that is not assigned permissions or does not belong to any Global Group that is assigned permissions be able to authenticate and log into the Web Client? Even if they are bounced by the vSphere Client with 'lack of permissions' error?
Granted, the non-privleged account has a blank inventory, but we would still like the ability to block Web Client access to AD accounts that are not explicitly granted access to assets. Has anyone else approached this?
thanks