Hi All, As part of adding the the vnic profiles feature, the configuration of the port mirroring moved from a vnic level to the profile level which the vnic uses. It unravels the need for granting a specific PORT_MIRRORING action group on the network to allow the user to set a vnic for port mirroring on that network. The old behaviour was simplified by granting the VnicProfileUser role on the profile that the admin permits the user to use. The admin is responsible to determine whether the profile should be served for port mirroring or not. It makes the old PORT_MIRRORING action group redundant, as it is no longer being used for controlling the port mirroring attribute of the network on the vm. An existing permissions for user for port mirroring will be replaced with a proper permissions on a vnic profile setted for port mirroring during upgrade. I would like to remove the PORT_MIRRORING action group entirely from the engine and from the REST as well. Is there any objection for doing so ? Thanks, Moti