7.4

To allow users or groups to modify and trigger a pipeline, you must assign permissions to those users and
groups. When you assign users and groups the role of Release Manager, they can modify and trigger the
pipeline. When you assign users and groups the role of Release Engineer, they can trigger the pipeline.
For more information, see the Using vRealize Code Stream guide.
Prerequisites
Log in to vRealize Automation as a tenant administrator.
Procedure
1 Select Administration > Users & Groups > Directory Users & Groups.
2 Enter a user or group name in the Search box and press Enter.
Do not use an at sign (@), backslash (\), or slash (/) in a name. You can optimize your search by
typing the entire user or group name in the form user@domain.
3 Click the name of the user or group to which you want to assign roles.
4 Select one or more roles from the Add Roles to this User list.
The Authorities Granted by Selected Roles list indicates the specific authorities you are granting.
5 (Optional) Click Next to view more information about the user or group.
6 On the User Details page, on the General tab, scroll the list of roles to add the user.
a To give the user permissions to modify and trigger a pipeline, select the Release Manager check
box.
b To give the user permissions to trigger a pipeline, select the Release Engineer check box.
7 Click Update.
Users who are currently logged in to the vRealize Automation must log out and log back in to the
vRealize Automation before they can navigate to the pages to which they have been granted access.
What to do next
Optionally, you can create your own custom groups from users and groups in your Active Directory
connections. See Create a Custom Group.
Create a Custom Group
Tenant administrators can create custom groups by combining other custom groups, identity store groups,
and individual identity store users. Custom groups provide more granular control over access within
vRealize Automation than business groups which correspond to a line of business, department, or other
organizational unit.
Custom groups enable you to grant access rights for tasks on a finer basis than the standard
vRealize Automation group assignments. For instance, you may want to create a custom group to allow
tenant administrators to control who has specific permissions within the tenant.
Configuring vRealize Automation
VMware, Inc. 164