Keeps track of who is in a vSAN cluster and restores that membership, while also storing an inventory of hosts, networks and devices plus object details like policies. An isolated node shows just 1 member in vmkernel.log.
Also called Cluster Monitoring, Membership, and Directory Service.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains CMMDS in context, with comparison tables and the common traps.
Terms in this definition
- vSAN
VMware's software-defined storage, which combines local devices across a cluster's ESX hosts into one shared datastore. Available as OSA or ESA, VCF can use it as principal storage.
- LIKE
Compares strings with a pattern that can contain the % and _ wildcards. Because it only understands character patterns, searching big volumes of text this way is much slower than using full-text search.
Related terms
- Access reviews
Microsoft Entra ID Governance capability that periodically asks reviewers or users themselves to confirm membership for guests, app users or groups, removing anyone who does not respond. PIM, by contrast, handles privileged roles.
- Assigned group
Microsoft Entra group whose membership is maintained by hand by its owners or administrators rather than through a dynamic rule.
- Automatic assignment policy
Works much like a dynamic group: a membership rule based on user attributes decides who gets an access package and removes assignments when people stop matching. It is an ID Governance entitlement management feature, and neither catalog owners nor access package managers are allowed to set one up.
- Azure Virtual Network Manager
Service for centrally managing connectivity, as hub-and-spoke or mesh, and security admin rules across VNets in many subscriptions. VNets in other tenants must be added as static members, because dynamic membership driven by Azure Policy works only within one tenant.
- Content Explorer Content Viewer
Grants the ability to read what is inside items listed in the Content and Data explorers, plus AI prompts and responses shown in DSPM. List Viewer membership does not include this.
- Data explorer
Lists, in Microsoft Purview, every item currently tagged with a sensitivity or retention label or containing a sensitive information type, together with where it sits. To open those items, an admin needs membership of two role groups: List viewer and Content viewer.
- db_owner
Built-in role granting complete control over a database, which is too much for everyday data access. If membership comes only through an Entra group, creating a database scoped credential fails with error 2760.
- DnsAdmins
A built-in group with domain local scope whose members administer DNS servers and zones. Because of the power it carries, its membership should be watched closely.