Restricting roles On Vcenter will affect Zerto Administration Using an account with Read-only permissions in vCenter, we can to log in to the Zerto GUI but cannot see any VMs or VPGs.


On the esxi host where Zerto is installed, additional roles  can be created and assigned the privileges they need. All privileges are implemented at the root level, and thus apply to every object in the vCenter Server.
Live Failover / Move
Manage Sites
Manage VPG
Manage VRA
Manage cloud connector
Test Failover

Each of these can be ticked off individually.