7.4

System Administrator
The system administrator is typically the person who installs vRealize Automation and is responsible for
ensuring its availability for other users. The system administrator creates tenants and manages system-
wide configuration such as system defaults for branding and notification providers. This role is also
responsible for monitoring system logs.
In a single-tenant deployment, the same person might also act as the tenant administrator.
IaaS Administrator
IaaS administrators manage cloud, virtual, networking, and storage infrastructure at the system level,
creating and managing endpoints and credentials, and monitoring IaaS logs. IaaS administrators organize
infrastructure into tenant-level fabric groups, appointing the fabric administrators who are responsible for
allocating resources within each tenant through reservations and reservation, storage, and networking
policies.
System-Wide Roles and Responsibilities
Users with system-wide roles manage configurations that can apply to multiple tenants. The system
administrator is only present in the default tenant, but you can assign IaaS administrators to any tenant.
Table 3. System-Wide Roles and Responsibilities
Role Responsibilities How Assigned
System Administrator
n
Create tenants.
n
Configure tenant identity stores.
n
Assign IaaS administrator role.
n
Assign tenant administrator role.
n
Configure system default branding.
n
Configure system default notification providers.
n
Monitor system event logs, not including IaaS logs.
n
Configure the vRealize Orchestrator server for use
with XaaS.
n
Create and manage (view, edit, and delete)
reservations across tenants if also a fabric
administrator.
Built-in administrator credentials are
specified when configuring single sign-on.
IaaS Administrator
n
Configure IaaS features, global properties.
n
Create and manage fabric groups.
n
Create and manage endpoints.
n
Manage endpoint credentials.
n
Configure proxy agents.
n
Manage Amazon AWS instance types.
n
Monitor IaaS-specific logs.
n
Create and manage (view, edit, and delete)
reservations across tenants if also a fabric
administrator.
The system administrator designates the
IaaS administrator when configuring a
tenant.
Foundations and Concepts
VMware, Inc. 18