Before you configure identity and access management for vRealize Operations Manager, you must synchronize the Active Directory users and groups for use by vRealize Operations Manager to the clustered Workspace ONE Access instance.
You synchronize the following Active Directory groups:
- Log in to the clustered Workspace ONE Access deployment at https://<clustered_workspace_one_access_fqdn>/admin with a user assigned the administrator role.
On the main navigation bar, click Identity and access management.
Click the Directories tab and select your directory name.
On the Settings tab, click Sync settings.
Click the Groups tab.
Under Groups to sync, click Select.
In the Select the Active Directory group DNs dialog box, select the Active Directory group names according to your values in the VMware Cloud Foundation Planning and Preparation Workbook.
Click Save and click Save and sync.
To initialize the directory import, click Sync directory.
Start Windows PowerShell.
Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.
$wsaFqdn = "xint-wsa01a.rainpole.io" $wsaUser = "admin" $wsaPass = "VMw@re1!" $domain = "sfo.rainpole.io" $bindUser = "svc-wsa-ad" $bindPass = "VMw@re1!" $baseDnGroup = "OU=Security Groups,DC=sfo,DC=rainpole,DC=io" $adGroups = "gg-vrops-admins","gg-vrops-content-admins","gg-vrops-read-only"
Perform the configuration by running the command in the PowerShell console.
Add-WorkspaceOneDirectoryGroup -server $wsaFqdn -user $wsaUser -pass $wsaPass -domain $domain -bindUser $bindUser -bindPass $bindPass -baseDnGroup $baseDnGroup -adGroups $adGroups