5.1

3 Choose a Source to import from.
If you have only an LDAP server or vCenter Single Sign On configured, the source is read-only.
Option Description
LDAP
Import groups from an LDAP server.
a Type a full or partial name in the text box and click Search Groups.
b Select the groups to import and click Add.
vSphere SSO
Import groups from vCenter Single Sign On. Type the group name or names
and click Add. Separate multiple groups with carriage returns.
4 Click OK.
Delete an LDAP Group
You can remove a group of system administrators from the vCloud Director system by deleting their LDAP
group.
When you delete an LDAP group, users who have a vCloud Director account based solely on their membership
in that group are stranded and cannot log in. See “Delete a System Administrator Who Lost Access to the
System,” on page 115.
Procedure
1 Click the Administration tab and click Groups in the left pane.
2 Right-click the group name and select Delete.
3 Click Yes to confirm the deletion.
View Group Properties
You can view group properties, such as the name, role, and organization of a group.
Procedure
1 Click the Administration tab and click Groups in the left pane.
2 Right-click the group name and select Properties.
The properties of the group are displayed.
Roles and Rights
vCloud Director uses roles and rights to determine what actions a user can perform in an organization. vCloud
Director includes a number of predefined roles with specific rights.
System administrators and organization administrators must assign each user or group a role. The same user
can have a different role in different organizations. System administrators can also create roles and modify
existing ones.
For information about the predefined roles and their rights, see “Predefined Roles and Their Rights,” on
page 137.
n
Create a Role on page 117
If the existing roles do not meet your needs, you can create a role and assign rights to the role. When you
create a role, it becomes available to all of the organizations in the system.
n
Copy a Role on page 117
To create a role based on an existing role, you can copy a role and modify its rights.
vCloud Director Administrator's Guide
116 VMware, Inc.