What user permissions/roles are required for the VMware vCenter user account to provision from Satellite 6.x?

Issue

• Creating a New Host on a VMware Compute Resource in Satellite 6.x returns an error similar to:

  "Failed to create a compute VMwareLab (VMWare) instance badhost.example.com: failed to create vm: NoPermission: 
  Permission to perform this operation was denied."
  

  2018-05-15 18:05:10 3b4949e0 [app] [E] Failed to rebuild Bootdisk image for client.example.com
  | RuntimeError: upload failed
  | /opt/theforeman/tfm/root/usr/share/gems/gems/rbvmomi-1.10.0/lib/rbvmomi/vim/Datastore.rb:53:in `upload'
  

  Failed to upload ISO image for instance client.example.com: #<Net::HTTPUnauthorized 401 Unauthorized 
  readbody=true>