Assign the permissions to the service account svc-vrops-nsx that are required to access monitoring data from the NSX Manager instance for the management domain in vRealize Operations Manager.
Procedure
- In a Web browser, log in to vCenter Server by using the vSphere Client.
Setting Value URL https://sfo01m01vc01.sfo01.rainpole.local/ui User name [email protected] Password vsphere_admin_password - In the VMs and templates inventory, expand the sfo01m01vc01.sfo01.rainpole.local tree and expand the sfo01-m01dc data center.
- Expand Management VMs folder, right-click the NSX Manager virtual machine, sfo01m01nsx01, and select Open remote console.
- At the command prompt, log in by using the following credentials.
Setting
Value
User name
admin
Password
nsx_admin_password
- Create the svc-vrops-nsx local service account on the NSX Manager instance.
- Run the command to switch to Privileged mode of NSX Manager.
enable
- When prompted, enter the admin password and press Enter.
- Switch to Configuration mode.
configure terminal
- Create the svc-vrops-nsx service account.
user svc-vrops-nsx password plaintext svc-vrops-nsx_password
- Assign the svc-vrops-nsx service account user access to NSX Manager from the vSphere Web Client.
user svc-vrops-nsx privilege web-interface
- Commit these updates to the NSX Manager.
write memory
- Exit Configuration mode.
exit
- Run the command to switch to Privileged mode of NSX Manager.
- Assign the security_admin role to the svc-vrops-nsx service account.
- Log in to the host machine that has access to your data center.
- Run the Postman application and log in.
- In the request pane, provide the URL query for the Management domain NSX Manager.
Setting
Value
HTTP request method
POST
Request URL
https://sfo01m01nsx01.sfo01.rainpole.local/api/2.0/services/usermgmt/role/svc-vrops-nsx?isCli=true
- On the Authorization tab, enter the authorization details.
Setting
Value
Type
Basic Auth
User name
admin
Password
nsx_admin_password
- On the Headers tab, enter the header details.
Setting
Value
Key
Content-Type
Key value
text/xml
- On the Body tab, select the Raw radio-button, and from the Text drop-down menu, select XML (Application/XML).
- In the Body text box, enter the following request body and click Send.
<accessControlEntry> <role>security_admin</role> <resource> <resourceId>globalroot-0</resourceId> </resource> </accessControlEntry>
The Status changes to 204 No Content.
- If there are workload domains with NSX Data Center for vSphere that are added to the SDDC, repeat the procedure for each Workload domain NSX Manager.