Which privilege should the administrator assign to allow a user to create baselines using Update Manager?

In VMware Update Manager, the 'Manage Baseline' privilege directly grants the ability to create new baselines, modify existing ones, and delete them. This is a distinct privilege from attaching or staging, and without it a user cannot define the compliance targets that drive patch and upgrade remediation workflows.

The 'Attach Baseline' privilege allows associating an already-existing baseline to an inventory object such as a host or cluster, but does not grant the ability to create a new baseline.

The 'Stage Baseline' privilege allows downloading patches to a host in preparation for remediation without applying them, which is a separate action from creating or defining a baseline.

'Configure Baseline' is not a recognized VMware Update Manager privilege - the correct privilege name for creating and managing baselines is 'Manage Baseline'.