Jason Boche posted a very good article on security of vCenter.I could try and explain it to you, but I think you’d be better of visiting the original article from Jason.
He explains it by comparing it to NTFS security for Windows administrators. Link to his article
Chapeau!