7.4

You can assign roles to your custom group, but it is not necessary in all cases. For example, you can
create a custom group called Machine Specification Approvers, to use for all machine pre-approvals. You
can also create custom groups to map to your business groups so that you can manage all groups in one
place. In those cases, you do not need to assign roles.
Prerequisites
Log in to vRealize Automation as a tenant administrator.
Procedure
1 Select Administration > Users & Groups > Custom Groups.
2
Click the Add icon ( ).
3 Enter a group name in the New Group Name text box.
Custom group names cannot contain the combination of a semicolon (;) followed by an equal sign (=).
4 (Optional) Enter a description in the New Group Description text box.
5 Select one or more roles from the Add Roles to this Group list.
The Authorities Granted by Selected Roles list indicates the specific authorities you are granting.
6 Click Next.
7 Add users and groups to create your custom group.
a Enter a user or group name in the Search box and press Enter.
Do not use an at sign (@), backslash (\), or slash (/) in a name. You can optimize your search by
typing the entire user or group name in the form user@domain.
b Select the user or group to add to your custom group.
8 Click Add.
Users who are currently logged in to the vRealize Automation must log out and log back in to the
vRealize Automation before they can navigate to the pages to which they have been granted access.
Add Just-in-Time Users with Custom Groups and Rules
You can add vRealize Automation users to a deployment without access to Active Directory using just-in-
time user provisioning. To invoke just-in-time provisioning for first time users, you must create rules to
populate the applicable custom group.
On initial log on, Just-in-time users are assigned group membership dynamically based on rules that you
create on the Advanced Group Membership wizard page. After initial log on, you can assign group
membership in the usual manner. This second page of this wizard contains four selection boxes for
creating rules based on a variety of criteria that define just-in-time users.
Configuring vRealize Automation
VMware, Inc. 165