The vla-service connects to the VMware vRealize Orchestrator to execute VM commands such as Start, Stop and Clone. The service needs a vCenter Server SSO service account to log into VMware vRealize Orchestrator Server and to run workflows. VMware recommends that you set up an account that has the least amount of privileges needed by the vla-service. To create this account, do the following:

  • Create a role for user to execute workflows onVMware vRealize Orchestrator

  • Create a VMware vRealize Orchestrator Administrators Group

  • Create a VLA user for VMware vRealize Orchestrator

  • Set the permission for the VLA user