vRealize Automation supports deployments with a single tenant or multiple tenants. System-wide configuration is always performed using the default tenant, and can then be applied to one or more tenants. For example, system-wide configuration might specify defaults for branding and notification providers.

Infrastructure configuration, including the infrastructure sources that are available for provisioning, can be configured in any tenant and is shared among all tenants. You organize your infrastructure resources, such as cloud or virtual compute resources, in fabric groups and assign a fabric administrator to manage those resources. Fabric administrators can allocate resources in their fabric group to business groups by creating reservations.

Default-Tenant Deployment

In a default-tenant deployment, all configuration occurs in the default tenant. Tenant administrators can manage users and groups, and configure tenant-specific branding, notifications, business policies, and catalog offerings. All users log in to the vRealize Automation console at the same URL, but the features available to them are determined by their roles.

Single-Tenant Deployment

In a single-tenant deployment, the system administrator creates a single tenant for the organization that uses the same vRealize Automation instance. Tenant users log in to the vRealize Automation console at a URL that is specific to the tenant. Tenant-level configuration is isolated from the default tenant, although users with system-wide roles, such as system administrator and IaaS administrator, can view and manage both configurations. The IaaS administrator for the organization tenant creates fabric groups and assigns fabric administrators. Fabric administrators can create reservations for business groups in the organization tenant.

Multi-Tenant Deployment

In a multi-tenant deployment, the system administrator creates tenants for each organization that uses the same vRealize Automation instance. Tenant users log in to the vRealize Automation console at a URL specific to their tenant. Tenant-level configuration is isolated from other tenants and from the default tenant, although users with system-wide roles can view and manage configuration across multiple tenants. The IaaS administrator for each tenant creates fabric groups and assigns fabric administrators to their respective tenants. Although fabric administrators can create reservations for business groups in any tenant, in this scenario they typically create and manage reservations within their own tenants. If the same identity store is configured in multiple tenants, the same users can be IaaS administrators or fabric administrators for each tenant.