To ensure security of the objects in your VMware Aria Operations instance, as a system administrator you can manage all aspects of user access control. You create user accounts, assign each user to be a member of one or more user groups, and assign roles to each user or user group to set their privileges.

Users must have privileges to access specific features in the VMware Aria Operations user interface. Access control is defined by assigning privileges to both users and objects. You can assign one or more roles to users, and activate them to perform a range of different actions on the same types of objects. For example, you can assign a user with the privileges to delete a virtual machine, and assign the same user with read-only privileges for another virtual machine.

User Access Control

You can authenticate users in VMware Aria Operations in several ways.

  • Create local user accounts in VMware Aria Operations.
  • Add an authentication source to authenticate imported users and user group information that resides on another machine.
    • Use LDAP to import users or user groups from an LDAP server. LDAP users can use their LDAP credentials to log in to VMware Aria Operations.
    • Create a single sign-on source and import users and user groups from a single sign-on server. Single sign-on users can use their single sign-on credentials to log in to VMware Aria Operations and vCenter Server. You can also use Active Directory through single sign-on by configuring the Active Directory through single sign-on and adding the single sign-on source to VMware Aria Operations.

User Preferences

To determine the display options for VMware Aria Operations, such as colors for the display and health chart, the number of metrics and groups to display, and whether to synchronize system time with the host machine, you configure the user preferences on the top toolbar.