6.3

Table Of Contents
vCenter Server Users in vRealize Operations Manager
vRealize Operations Manager supports vCenter Server users. To log in to vRealize Operations Manager,
vCenter Server users must be valid users in vCenter Server.
Roles and Associations
A vCenter Server user must have either the vCenter Server Admin role or one of the
vRealize Operations Manager privileges, such as PowerUser which assigned at the root level in
vCenter Server, to log in to vRealize Operations Manager. vRealize Operations Manager uses only the
vCenter privileges, meaning the vRealize Operations Manager roles, at the root level, and applies them to all
the objects to which the user has access. After logging in, vCenter Server users can view all the objects in
vRealize Operations Manager that they can already view in vCenter Server.
Logging in to vCenter Server Instances and Accessing Objects
vCenter Server users can access either a single vCenter Server instance or multiple vCenter Server instances,
depending on the authentication source they select when they log in to vRealize Operations Manager.
n
If users select a single vCenter Server instance as the authentication source, they have permission to
access the objects in that vCenter Server instance. After the user has logged in, an account is created in
vRealize Operations Manager with the specic vCenter Server instance serving as the authentication
source.
n
If users select All vCenter Servers as the authentication source, and they have identical credentials for
each vCenter Server in the environment, they see all the objects in all the vCenter Server instances. Only
users that have been authenticated by all the vCenter Servers in the environment can log in. After a user
has logged in, an account is created in vRealize Operations Manager with all vCenter Server instances
serving as the authentication source.
vRealize Operations Manager does not support linked vCenter Server instances. Instead, you must
congure the vCenter Server adapter for each vCenter Server instance, and register each vCenter Server
instance to vRealize Operations Manager.
Only objects from a specic vCenter Server instance appear in vRealize Operations Manager. If a
vCenter Server instance has other linked vCenter Server instances, the data does not appear.
vCenter Server Roles and Privileges
You cannot view or edit vCenter Server roles or privileges in vRealize Operations Manager.
vRealize Operations Manager sends roles as privileges to vCenter Server as part of the vCenter Server
Global privilege group. A vCenter Server administrator must assign vRealize Operations Manager roles to
users in vCenter Server.
vRealize Operations Manager privileges in vCenter Server have the role appended to the name. For
example, vRealize Operations Manager ContentAdmin Role, or vRealize Operations Manager PowerUser
Role.
Read-Only Principal
A vCenter Server user is a read-only principal in vRealize Operations Manager, which means that you
cannot change the role, group, or objects associated with the role in vRealize Operations Manager. Instead,
you must change them in the vCenter Server instance. The role applied to the root folder applies to all the
objects in vCenter Server to which a user has privileges. vRealize Operations Manager does not apply
individual roles on objects. For example, if a user has the PowerUser role to access the vCenter Server root
folder, but has read-only access to a virtual machine, vRealize Operations Manager applies the PowerUser
role to the user to access the virtual machine.
Chapter 1 Configuring Users and Groups in vRealize Operations Manager
VMware, Inc. 11