Automation Orchestrator provides different tools and interfaces based on the specific responsibilities of the global user roles. In Automation Orchestrator you can have users with full rights, that are a part of the administrator group (administrators), developers (workflow designers), troubleshooting users (viewers), and users with limited access.

Automation Orchestrator user roles are managed in the Role Management menu of the Automation Orchestrator Client. For more information on configuring user roles in the Automation Orchestrator Client, go to Assign Roles in the Automation Orchestrator Client in the Using Automation Orchestrator guide.

Note: For Automation Orchestrator deployments authenticated with VMware Aria Automation, or using a VMware Cloud Foundation license, user roles are assigned with the Identity and Access Management service of the VMware Aria Automation platform. Go to Configure Automation Orchestrator Client Roles in VMware Aria Automation in Using Automation Orchestrator.
User Role Description
Administrator This user has full access to all Automation Orchestrator platform capabilities and content, including content created by specific groups. Primary administrator user responsibilities include:
  • Installing and configuring Automation Orchestrator.
  • Adding users to the Automation Orchestrator Client, assigning roles, and creating and deleting groups. Go to Create Groups in the Automation Orchestrator Client in Using Automation Orchestrator.
  • Creating an integration with a Git repository for the developers in their Automation Orchestrator environment. Go to Configure a Connection to a Git Repository in Using Automation Orchestrator.
  • Troubleshooting their Automation Orchestrator environment through features like workflow validation and debugging workflow scripts.
Viewer This user has read-only access to all Automation Orchestrator Client, including all groups and group content. This user can view but cannot create, edit, or run content, or export workflow runs, workflow run logs, or packages. Viewers are not limited by group permissions.
Note: The viewer role is supported only for Automation Orchestrator instances authenticated with VMware Aria Automation. This role is not mapped to a VMware Aria Automation role by default so it must be explicitly assigned to users.
Workflow Designer This user can extend the Automation Orchestrator platform functionality by creating and editing objects. Workflow designers do not have access to the administrative and troubleshooting features of the Automation Orchestrator Client. Primary workflow designer responsibilities include:
  • Creating, editing, running, and deleting Automation Orchestrator objects like workflows, actions, policies, and configuration elements.
  • Scheduling workflow runs. Go to Schedule Workflows in the Automation Orchestrator Client in Using Automation Orchestrator.
  • Adding content created by the workflow developer to groups they are assigned to.
  • Pushing local changes to the remote Git repository in the active branch defined by an administrator. Go to Push Changes to a Git Repository in Using Automation Orchestrator.
Users with limited rights Users with no assigned role can still log in to the Automation Orchestrator Client, but have limited access to client features and content. If they are assigned to a group, this user can view and run content included in that group. Users who are not assigned to a group can only view their own workflow runs through the available integrations to VMware Aria Automation.