Managing LDAP Users

You can configure VMware Data Services Manager to use an LDAP server for both authentication and authorization as described in Configuring LDAP Settings.

Adding LDAP Users

You add LDAP users to VMware Data Services Manager by configuring LDAP group-to-role mapping on a per organization basis as described in:

• Importing Organization Users from LDAP
• Importing Provider Administrator Users from LDAP

Deleting LDAP Users

You can delete an LDAP user from a Tenant Org that you have created in VMware Data Services Manager as described in Deleting a Local User. The user that you want to delete must not own any active VMware Data Services Manager objects (database, backups, and log bundles).

While you can delete an LDAP user, you must update their LDAP group assignments or delete the user from LDAP to permanently revoke their access to VMware Data Services Manager.

If you want to keep the LDAP user's databases running, an Organization Administrator user in the Tenant Org has the permissions required to continue managing the databases.

Note: The organization must include at least one member assigned the Organization Administrator role for VMware Data Services Manager to continue to manage the LDAP user's databases.