6.0.3

n
Delete vCenter Single Sign-On Solution Users on page 58
vCenter Single Sign-On displays solution users. A solution user is a collection of services. Several
vCenter Server solution users are predened and authenticate to vCenter Single Sign-On as part of
installation. In troubleshooting situations, for example, if an uninstall did not complete cleanly, you
can delete individual solution users from the vSphere Web Client.
n
Change Your vCenter Single Sign-On Password on page 59
Users in the vsphere.local domain can change their vCenter Single Sign-On passwords from the
vSphere Web Client. Users in other domains change their passwords following the rules for that
domain. You can change a vCenter Single Sign-On password from the vSphere Web Client.
Add vCenter Single Sign-On Users
Users listed on the Users tab in the vSphere Web Client are internal to vCenter Single Sign-On and belong to
the vsphere.local domain.
You can select other domains and view information about the users in those domains, but you cannot add
users to other domains from the vCenter Single Sign-On management interface of the vSphere Web Client.
Procedure
1 Log in to the vSphere Web Client as [e-mail] or as another user with vCenter Single
Sign-On administrator privileges.
Users with vCenter Single Sign-On administrator privileges are in the Administrators group in the
vsphere.local domain.
2 Click Home, and browse to Administration > Single Sign-On > Users and Groups.
3 If vsphere.local is not the currently selected domain, select it from the dropdown menu.
You cannot add users to other domains.
4 On the Users tab, click the New User icon.
5 Type a user name and password for the new user.
You cannot change the user name after you create a user.
The password must meet the password policy requirements for the system.
6 (Optional) Type the rst name and last name of the new user.
7 (Optional) Enter an email address and description for the user.
8 Click OK.
When you add a user, that user initially has no privileges to perform management operations.
What to do next
Add the user to a group in the vsphere.local domain, for example, to the group of users who can
administrator VMCA (CAAdmins) or to the group of users who can administer vCenter Single Sign-On
(Administrators). See “Add Members to a vCenter Single Sign-On Group,” on page 57.
Disable and Enable vCenter Single Sign-On Users
When a vCenter Single Sign-Onuser account is disabled, the user cannot log in to the vCenter Single Sign-
On server until the account is enabled by an administrator. You can disable and enable users from the
vSphere Web Client interface.
Disabled user accounts remain available in the vCenter Single Sign-On system, but the user cannot log in or
perform operations on the server. Users with administrator privileges can disable and enable users from the
vCenter Users and Groups page.
Chapter 2 vSphere Authentication with vCenter Single Sign-On
VMware, Inc. 55