If you’re like me, you like to restrict as much as possible and delegate selected rights where possible. I’ve only just found out that this is possible with Hyper-V without using VMM 2008.
The Virtual PC’s Guy describes the process in his blog. This will allow you to grant selected rights to VM’s and Hyper-V to non-administrators on the Hyper-V server. To do this you edit an Authorisation Store using the Authorisation Manager.
Note that this is in the Hyper-V release notes:
"If the Hyper-V authorization store is located in Active Directory, then the removal of a user from a role does not take immediate effect. Either the server running Hyper-V (the computer that runs the Virtual Machine Management Service (VMMS)) or Active Directory needs to be rebooted to apply the changes. To avoid this issue, use an XML file as the store type. To fix this issue, reboot the Hyper-V server hosting VMMS, restart VMMS and Network Virtual Service Provider Windows Management Instrumentation (NVSPWMI) services or reboot Active Directory".
Lesson: Use groups, not users to grant rights.
Credit: Virtual PC Guy.