The vla-service connects to the VMware vRealize Orchestrator to execute VM commands such as Start, Stop and Clone. The service needs a vCenter Server SSO service account to log into VMware vRealize Orchestrator Server and to run workflows. VMware recommends that you set up an account that has the least amount of privileges needed by the vla-service. To create this account, do the following:
Create a role for user to execute workflows onVMware vRealize Orchestrator
Create a VMware vRealize Orchestrator Administrators Group
Create a VLA user for VMware vRealize Orchestrator
Set the permission for the VLA user