This section discusses the roles required to be assigned to the NSX-T user. Local user creation is not allowed on NSX-T. The admin can select a VMware Identity Manager (VIDM) or an LDAP user and assign the required roles to it.

Customized role creation is not supported in NSX-T 3.0. So, the user has to be assigned an existing role that has all the permissions required by the NSX Advanced Load Balancer - NSX-T cloud. Consider an example in which the role is assigned to a VIDM user.


  1. Log in to the NSX-T manager UI as an admin user.
  2. Navigate to System > User and Roles > USERS
  3. Click Add and select Role Assignment for VIDM
  4. Select the Network Engineer role.
  5. Click Save.