5.0

2 On the Access Rights tab, select the user group under Account Groups.
3 In the Access Rights pane on the right, select the check box for each menu and menu option that group
members can access.
The Access Rights pane contains an expandable list of access rights for actions that you can perform in the
vCenter Operations Manager menus. The Administrative Access right provides access to the Admin
menu. If the check box for an access right is deselected, group members cannot perform the associated
action.
4 Click the Save Changes icon to save the access rights for the user group.
What to do next
Add users to the user group. See “Assign a User to a User Group,” on page 68.
Assign a User to a User Group
You can assign any number of users to a user group, and each user can belong to any number of groups. You
can create administrators in addition to the default admin user by assigning users to the Administrators group.
NOTE Only by the admin user can perform some vCenter Operations Manager features, such as querying the
vCenter Operations Manager database.
Prerequisites
n
Become familiar with the predefined user groups. See “Predefined User Groups,” on page 67.
n
If the predefined user groups do not meet your needs, create new user groups. See “Add a User
Group,” on page 67.
Procedure
1 Select Admin > Security.
2 On the User Management tab, select a user in the User Accounts pane.
You can press Ctrl-click to select multiple individual users or Shift-click to select a range of users
3 Drag the user to the Account Groups pane and drop it into the user group.
Set Password Policies
You can configure the account lockout, password strength, and password change policy settings for
vCenter Operations Manager user passwords.
NOTE vCenter Operations Manager sessions time out after 30 minutes of inactivity and require users to log in
again. You cannot change this timeout value.
Procedure
1 Select Admin > Security.
2 Select the Password Policy tab.
3 In the Account Lockout Policy group, configure the account lockout settings.
Option Description
Active
Locks users out of vCenter Operations Manager after the number of failed
login attempts specified in Allowed Login Attempts.
Allowed Login Attempts
The number of login attempts that a user can attempt before being locked
out of vCenter Operations Manager.
VMware vCenter Operations Manager Enterprise Administration Guide
68 VMware, Inc.