7.4

Tenant Roles and Responsibilities in vRealize Automation
You can assign tenant roles to users in any tenant. The roles have responsibilities that are specific to that
tenant.
Table 5. Tenant Roles and Responsibilities
Role Responsibilities How Assigned
Tenant administrator
n
Customize tenant branding.
n
Manage tenant identity stores.
n
Manage user and group roles.
n
Create custom groups.
n
Manage notification providers.
n
Enable notification scenarios for
tenant users.
n
Configure vRealize Orchestrator
servers, plug-ins and workflows for
XaaS.
n
Create and manage catalog
services.
n
Manage catalog items.
n
Manage actions.
n
Create and manage entitlements.
n
Create and manage approval
policies.
n
Monitor tenant machines and send
reclamation requests.
The system administrator designates a
tenant administrator when creating a
tenant. Tenant administrators can assign
the role to other users in their tenant at
any time from the Administration tab.
Fabric administrator
n
Manage property groups.
n
Manage compute resources.
n
Manage network profiles.
n
Manage Amazon EBS volumes and
key pairs.
n
Manage machine prefixes.
n
Manage property dictionary.
n
Create and manage reservations
and reservation policies in their own
tenant.
n
If this role is added to a user with
IaaS administrator or system
administrator privileges, the user can
create and manage reservations and
reservation policies in any tenant.
The IaaS administrator designates the
fabric administrator when creating or
editing fabric groups.
Application architect
To successfully add software components
to the design canvas, you must also have
business group member, business group
administrator, or tenant administrator role
access to the target catalog.
n
Assemble and manage composite
blueprints.
Tenant administrators can assign this role
to users in their tenant at any time from
the Administration tab.
Foundations and Concepts
VMware, Inc. 21