Configure Service Account Permissions in vSphere for the Integration of vRealize Operations Manager with Site Protection and Disaster Recovery for VMware Cloud Foundation Solution Components

In vSphere, assign global permissions to the Realize Operations Manager custom accounts to access monitoring data from Site Recovery Manager and vSphere Replication in vRealize Operations Manager.

UI Procedure

1. Log in to the management domain vCenter Server at https://<management_vcenter_server_fqdn>/ui as [e-mail].

2. Select Menu > Administration.

3. In the left pane, select Access control > Global permissions.

4. Click the Add permission icon.

5. Configure the settings for the service account for application-to-application communication from the Site Recovery Manager adapters in vRealize Operations Manager to vSphere and Site Recovery Manager according to your values in the VMware Cloud Foundation Planning and Preparation Workbook, select the Propagate to children check box, and click OK.

6. Repeat the steps for the service account for application-to-application communication from the vSphere Replication adapters in vRealize Operations Manager to vSphere and vSphere Replication.

PowerShell Procedure

1. Start Windows PowerShell.

2. Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.

   $sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"
   $sddcManagerUser = "[e-mail]"
   $sddcManagerPass = "VMw@re1!"
   
   $domainBindUser = "svc-vsphere-ad"
   $domainBindPass = "VMw@re1!"
   
   $srmServiceAccount = "vrops-srm"
   $srmRole = "Readonly"
   
   $vrmserviceAccount = "vrops-vr"
   $vrmRole = "VRM replication viewer"

3. Perform the configuration by running the command in the PowerShell console.

   Add-vCenterGlobalPermission -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain vsphere.local -domainBindUser $domainBindUser -domainBindPass $domainBindPass -principal $srmServiceAccount -role $srmRole -propagate true -type user -localdomain
   
   Add-vCenterGlobalPermission -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain vsphere.local -domainBindUser $domainBindUser -domainBindPass $domainBindPass -principal $vrmserviceAccount -role $vrmRole -propagate true -type user -localdomain