Configure User Privileges on vRealize Automation for Integration with vRealize Operations Manager for Consolidated SDDC

Assign the permissions that are required to access monitoring data from the vRealize Automation in vRealize Operations Manager to the svc-vrops-vra operations service account. The svc-vrops-vra user has rights that are specifically required for access to vRealize Automation in vRealize Operations Manager.

Procedure

1. Log in to the vRealize Automation portal.
   1. Open a Web browser and go to https://vra01svr01.rainpole.local/vcac.
   2. Log in using the following credentials.

      Setting	Value
      User name	administrator
      Password	deployment_admin_password
      Domain	vsphere.local

2. On the Tenants tab, click the Rainpole tenant.
3. Click the Administrators tab to assign Tenant administrator and IaaS administrator roles to the svc-vrops-vra service account.
   1. Enter svc-vrops-vra in the Tenant administrators search text box, click the Search icon, and click svc-vrops-vra ([e-mail]) user that shows in the search result list to assign the role to the account.
   2. Enter svc-vrops-vra in the IaaS administrators search text box, click the Search icon, and click svc-vrops-vra ([e-mail]) user that shows in the search result list to assign the role to the account.
   3. Click Finish.
4. Log out of the vRealize Automation portal for the default tenant.
5. Log in to the vRealize Automation Rainpole portal.
   1. Open a Web browser and go to https://vra01svr01.rainpole.local/vcac/org/rainpole.
   2. Log in using the following credentials.

      Setting	Value
      User name	vra-admin-rainpole
      Password	vra-admin-rainpole_password
      Domain	rainpole.local

6. Navigate to Administration > Users & Groups > Directory Users and Groups to assign the Software Architect role to the svc-vrops-vra service account.
   1. Enter svc-vrops-vra in the search box, click the Search icon and click the svc-vrops-vra ([e-mail]) user.

      The settings for the svc-vrops-vra account appear.

   2. On the General tab, select Infrastructure Architect and Software Architect under Add roles to this User, and click Finish.

      IaaS Administrator and Tenant Administrator roles are selected by default.

7. Navigate to Infrastructure > Endpoints > Fabric Groups to assign the fabric administrator role to the svc-vrops-vra service account.
   1. On the Fabric Groups page, click SFO Fabric Group.
   2. On Edit Fabric Group page, enter svc-vrops-vra in Fabric administrators search text box and click the Search icon.
   3. Click [e-mail] in the search result list to assign the Fabric administrator role to the account, and click OK.