A VM folder contains VM1 and VM2. Group A has permission to power on virtual machines, defined on the VM folder and its children. Group B has permission to power off virtual machines, defined on the V

Power on alone would be the effective permission only if Group B's power off privilege were not inherited, but vSphere unions group permissions rather than applying only one group's privileges.

Power off alone is incorrect because vSphere does not restrict users to only one group's permissions; all group memberships contribute their privileges to the effective permission set.

vSphere permissions are additive when a user is a member of multiple groups - the effective permission is the combination of all privileges granted to all groups the user belongs to. Because Group A grants power on and Group B grants power off, the user inherits both privileges on VM1 and VM2.

Reset is not granted by either group and cannot appear in the effective permissions set, as vSphere only grants privileges explicitly assigned to the user's groups.