7.2

Tenant Roles and Responsibilities in vRealize Automation
You can assign tenant roles to users in any tenant. The roles have responsibilities that are specic to that
tenant.
Table 5. Tenant Roles and Responsibilities
Role Responsibilities How Assigned
Tenant administrator
n
Customize tenant branding.
n
Manage tenant identity stores.
n
Manage user and group roles.
n
Create custom groups.
n
Manage notication providers.
n
Enable notication scenarios for
tenant users.
n
Congure vRealize Orchestrator
servers, plug-ins and workows
for XaaS.
n
Create and manage catalog
services.
n
Manage catalog items.
n
Manage actions.
n
Create and manage entitlements.
n
Create and manage approval
policies.
n
Monitor tenant machines and
send reclamation requests.
The system administrator designates a
tenant administrator when creating a
tenant. Tenant administrators can
assign the role to other users in their
tenant at any time from the
Administration tab.
Fabric administrator
n
Manage property groups.
n
Manage compute resources.
n
Manage network proles.
n
Manage Amazon EBS volumes
and key pairs.
n
Manage machine prexes.
n
Manage property dictionary.
n
Create and manage reservations
and reservation policies in their
own tenant.
n
If this role is added to a user with
IaaS administrator or system
administrator privileges, the user
can create and manage
reservations and reservation
policies in any tenant.
The IaaS administrator designates the
fabric administrator when creating or
editing fabric groups.
Application architect
n
Assemble and manage composite
blueprints.
Tenant administrators can assign this
role to users in their tenant at any time
from the Administration tab.
Infrastructure architect
n
Create and manage infrastructure
blueprint components.
n
Assemble and manage composite
blueprints.
Tenant administrators can assign this
role to users in their tenant at any time
from the Administration tab.
XaaS architect
n
Dene custom resource types.
n
Create and publish XaaS
blueprints.
n
Create and manage resource
mappings.
n
Create and publish resource
actions.
Tenant administrators can assign this
role to users in their tenant at any time
from the Administration tab.
Foundations and Concepts
20 VMware, Inc.