Configure Service Account Permissions for the vRealize Automation to NSX-T Integration on the VI Workload Domain NSX Manager Cluster for Private Cloud Automation

To provide the necessary privileges and permissions to the service account for the vRealize Automation to NSX-T Data Center integration, you assign the Enterprise administrator role in the VI workload domain NSX Manager cluster to the integration account.

Note: For an environment with NSX Federation, you configure the service account permissions on the VI workload domain NSX Local Manager clusters.

UI Procedure

Log in to the NSX Manager cluster for the VI workload domain at https://<vi_workload_nsx_manager_fqdn>/login.jsp?local=true as admin.
On the main navigation bar, click System.
In the left pane, select Settings > User management.On the User role assignment tab, from the Add drop-down menu, select Role assignment for VIDM.
In the Search user/user group text box, enter and select the name of the service account for the vRealize Automation to NSX-T Data Center integration.
From the Role drop-down menu, select Enterprise Admin and click Save.
Repeat this procedure for each VI workload domain NSX Manager cluster in each VMware Cloud Foundation instance.

PowerShell Procedure

Start Windows PowerShell.

Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.

$sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"
$sddcManagerUser = "administrator@vsphere.local"
$sddcManagerPass = "VMw@re1!"

$sddcDomainName = "sfo-w01"

$nsxVraUser = "svc-vra-nsx@sfo.rainpole.io"

Perform the configuration by running the command in the PowerShell console.

Add-NsxtVidmRole -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $sddcDomainName -type user -principal $nsxVraUser -role enterprise_admin