6.2

Table 2‑4. Tenant Roles and Responsibilities
Role Responsibilities How Assigned
Tenant administrator
n
Manage tenant identity stores.
n
Manage user and group roles.
n
Create custom groups.
n
Customize tenant branding.
n
Manage notification providers.
n
Enable notification scenarios for
tenant users.
n
Create and manage approval
policies.
n
Manage catalog services.
n
Manage catalog items.
n
Manage actions.
n
Manage entitlements.
n
Monitor tenant machines and send
reclamation requests.
n
Configure vRealize Orchestrator
servers, plug-ins and workflows for
use in the Advanced Services
Designer.
n
Create and publish shared machine
blueprints from IaaS.
The system administrator designates a
tenant administrator when creating a
tenant. Tenant administrators can assign
the role to other users in the tenant.
Service architect
n
Define custom resource types.
n
Create and publish service
blueprints in the Advanced Services
Designer.
n
Create and publish custom actions.
The tenant administrator can assign this
role to give a user or group the rights to
create custom services in the Advanced
Service Designer.
Application architect
n
Create, modify, and delete
applications in Application Services.
The tenant administrator can assign this
role to a user or group.The user or group
must be in the tenant registered with
Application Services.
Application catalog administrator
n
Define services, templates,
operating systems, tasks, and tags
in the Application Services library.
The tenant administrator can assign this
role to a user or group. The user or group
must be in the tenant registered with
Application Services.
Application cloud administrator
n
Define resources and deployment
environments.
The tenant administrator can assign this
role to a user or group. The user or group
must be in the tenant registered with
Application Services.
Application publisher and developer
n
Deploy applications into the
vRealize Automation catalog.
n
Create, update, and publish
services, library items, and actions in
Application Services.
The tenant administrator can assign this
role to a user or group. The user or group
must be in the tenant registered with
Application Services.
Foundations and Concepts
VMware, Inc. 19