7.0

Figure 3. Multitenant Example with Infrastructure Configuration in Each Tenant
IaaS
admin
IaaS
admin
Tenant
admin
Tenant A
http://vra.mycompany.com/
vcac/org/tenanta/
Tenant
admin
Tenant B
Business
group mgr
Business
Group
Business
group mgr
Business
Group
http://vra.mycompany.com/
vcac/org/tenantb/
Tenant
admin
Tenant C
Business
group mgr
Business
Group
Business
group mgr
Business
Group
http://vra.mycompany.com/
vcac/org/tenantc/
Default
Tenant
(System config)
Hypervisors
Public
clouds
Physical
servers
IaaS
admin
Fabric
Fabric
admin
Fabric Group
Business
group mgr
Business
Group
Business
group mgr
Business
Group
Reservation Reservation
Fabric
admin
Fabric Group
Fabric
admin
Fabric Group
Reservation Reservation Reservation Reservation
System
admin
Infrastructure
http://vra.
mycompany.com/
vcac/
User Roles Overview
Roles consist of a set of privileges that can be associated with users to determine what tasks they can
perform. Based on their responsibilities, individuals might have one or more roles associated with their
user account.
All user roles are assigned within the context of a specific tenant. However, some roles in the default
tenant can manage system-wide configuration that applies to multiple tenants.
System-Wide Role Overview
System-wide roles are typically assigned to an IT system administrator. In some organizations, the IaaS
administrator role might be the responsibility of a cloud administrator.
System Administrator
The system administrator is typically the person who installs vRealize Automation and is responsible for
ensuring its availability for other users. The system administrator creates tenants and manages system-
wide configuration such as system defaults for branding and notification providers. This role is also
responsible for monitoring system logs.
In a single-tenant deployment, the same person might also act as the tenant administrator.
Foundations and Concepts
VMware, Inc. 16