> currently adding a new CDROM is allowed if you have VM.Config.CDROM rights. > But you can't delete it with these rights. > > You get an exception regarding missing VM.Config.Disk rights. > > Is this correct? Do you talk about add/remove a CDROM device, or changing/eject CDROM media?