To allow provisioning virtual machines and logical networks, configure privileges for vRealize Automation for the service account svc-vra@rainpole.local on both the Compute vCenter Server and the Compute Cluster NSX Instance.