7.4

Table 5. Tenant Roles and Responsibilities (Continued)
Role Responsibilities How Assigned
Business group manager
n
Add and delete users within the
business group.
n
Assign support user roles to users in
the business group.
n
Create and manage entitlements for
the business group.
n
Request and manage items on
behalf of a user in the business
group.
n
Assign approval policies for the
business group.
n
Monitor resource usage in a
business group.
n
Change machine owner.
The tenant administrator designates the
business group manager when creating or
editing business groups.
Shared access user
n
Use and run actions on the
resources that other business group
members deploy.
n
Cannot initiate a provisioning
request.
The tenant administrator designates the
shared access users when creating or
editing business groups.
Approval administrator
n
Create and manage approval
policies.
Tenant administrators can assign this role
to users in their tenant at any time from
the Administration tab.
Approver
n
Approve service catalog requests,
including provisioning requests or
any resource actions.
The tenant administrator or approval
administrator creates approval policies
and designates the approvers for each
policy.
Support user
n
Request and manage service
catalog items on behalf of the other
members of the business group
n
Change machine owner.
The tenant administrator designates the
support user when creating or editing
business groups.
Business user
n
Request service catalog items to
which they are entitled.
n
Manage their provisioned resources.
The tenant administrator designates the
business users who can consume IT
services when creating or editing business
groups.
Health Consumer
n
Can view test results.
n
Cannot configure, edit, or delete a
test.
The IaaS administrator designates
privilege to any role..
Security administrator
n
Create a message board whitelist. Tenant administrators can assign this role
to users in their tenant at any time from
the Administration tab.
Containers User Roles and Access Privileges
You can use container-specific roles to control who can create and configure containers by using options
in the vRealize Automation Containers tab and who can add and configure container components in
blueprints by using options in the Design tab.
Foundations and Concepts
VMware, Inc. 23