A vSphere Replication user needs to connect a source site to a target site. What privilege is needed at both sites?

The VRM remote.Manage VRM privilege is the specific vCenter permission required at both the source and target sites to allow an administrator to establish, modify, and remove site-to-site replication pairings. Without this privilege at both endpoints, the connection request will be denied.

VRM datastore mapper.Manage governs the ability to configure datastore mappings between sites, not the site connection (pairing) itself.

Host.vSphere Replication.Manage replication is a host-level privilege controlling replication tasks on ESXi hosts, not the site-to-site connection establishment.

Virtual machine.vSphere Replication.Manage replication applies to configuring replication for individual virtual machines, not to pairing replication sites together.