6.2

Table Of Contents
Table 23. System-Wide Roles and Responsibilities
Role Responsibilities How Assigned
System Administrator
n
Create tenants
n
Configure tenant identity stores
n
Assign IaaS administrator role
n
Assign tenant administrator role
n
Configure system default branding
n
Configure system default notification providers
n
Monitor system event logs, not including IaaS logs
n
Configure the vRealize Orchestrator server for use
in the Advanced Services Designer
Built-in administrator credentials are
specified when configuring single sign-on.
IaaS Administrator
n
Configure IaaS features, global properties
n
Manage IaaS licenses
n
Create and manage fabric groups
n
Create and manage endpoints
n
Manage endpoint credentials
n
Configure proxy agents
n
Manage Amazon AWS instance types
n
Monitor IaaS-specific logs
The system administrator designates the
IaaS administrator when configuring a
tenant.
Fabric Administrator
n
Manage build profiles
n
Manage compute resources
n
Manage cost profiles
n
Manage network profiles
n
Manage Amazon EBS volumes and key pairs
n
Manage machine prefixes
n
Manage property dictionary
n
Manage reservations and reservation policies
The IaaS administrator designates the
fabric administrator when creating or
editing fabric groups.
Tenant Role Overview
Tenant roles have responsibilities that are limited to a specific tenant, and cannot affect other tenants in
the system.
Tenant Administrator Typically a line-of-business administrator, business manager, or IT
administrator who is responsible for a tenant. Tenant administrators
configure vRealize Automation for the needs of their organizations. They
are responsible for user and group management, tenant branding and
notifications, and business policies such as approvals and entitlements.
They also track resource usage by all users within the tenant and initiate
reclamation requests for virtual machines.
Service Architect Umbrella term for the individuals who are responsible for creating the
blueprints for the catalog items that consumers can request from the
service catalog. This role is typically someone in the IT department, such
as an architect or analyst.
Foundations and Concepts
VMware, Inc. 17