The Security and Compliance layer contains the Identity and Access Management component, which is required to control access to the SDDC solutions. In this design, the identity and access management function is provided by VMware Workspace ONE Access. To control access to regional SDDC solutions, you deploy a region-specific Workspace ONE Access instance.

Figure 1. Security and Compliance in the SDDC
The security and compliance layer contains identity and access management for the management domain.