A vSphere Replication user needs to connect a source site to a target site. What privilege is needed at both sites?

The VRM remote.Manage VRM privilege specifically grants the right to pair and manage remote vSphere Replication sites. It must be present at both the source and target site for the connection to succeed, as both sites authenticate the operation.

VRM datastore mapper.Manage governs datastore mapping between sites for placement of replicated VMs, not the act of establishing the site connection itself.

Host.vSphere Replication.Manage replication is a host-level privilege controlling replication tasks on ESXi hosts, not the inter-site pairing operation.

Virtual machine.vSphere Replication.Manage replication controls replication configuration on individual VMs, not the site-to-site connection.