check-circle-line exclamation-circle-line close-line

<

Follow the outlined procedures to get your Workspace ONE Cloud Admin Hub up and running. Access your VMware Cloud console to create and manage user accounts for the hub. Then, you can federate your corporate domain to use your organization's SSO and identity source to sign-in to VMware Cloud services and the Workspace ONE Cloud Admin Hub.

Navigation

VMware Cloud Product Documentation

Find content about VMware Cloud services by accessing What is VMware Cloud. To learn about organization roles and permissions for VMware Cloud services, access Organization Roles and Permissions.

First Steps

Read Your Service Welcome Email

After you make your subscription purchase (either through VMware Sales or through your partner) or after you request a trial, VMware sends a service welcome email to the email ID associated with the order or trial request.

  1. Find your Welcome to Workspace ONE email that includes your unique service activation link. If you haven't seen the email, check your spam messages or corporate spam filter. The unique service activation the email contains directs you to the VMware Cloud console. It is important to use this service activation link when you log in to the VMware Cloud console for the first time.
  2. If you still cannot find the email, ask your VMware Sales Specialist or Customer Success Manager to resend the email or to provide you with the service activation link.

Log In to Your VMware Cloud Console

The service activation link provided to you in the welcome email directs you to the VMware Cloud console.

  1. Click the service activation link provided to you in the welcome email.
  2. Use the email and password from your My VMware account to log in. If you do not have a My VMware account, create one and fill in all mandatory fields.

Access Your Workspace ONE Cloud Admin Hub Console

A Cloud Services Organization is a logical container for all your Workspace ONE Cloud Admin Hub services. In the VMware Cloud console, attach or couple your Workspace ONE Cloud Admin Hub to a Cloud Services Organization so you can access the Workspace ONE Cloud Admin Hub console.

  1. After you log in to the VMware Cloud console, you see a list of organizations that were previously added to your service. You can create a new organization if you don't have any added. For details, see the Create a Cloud Services Organization section.
  2. After you add Workspace ONE Cloud Admin Hub to a Cloud Services Organization, the system logs you into your Workspace ONE Cloud Admin Hub console.

Create a Cloud Services Organization

After you log in to the VMware Cloud console, you see a list of organizations that are associated with your account. To help simplify your environment, you can add an organization for each new service. Although this step is optional, consider its streamlining advantages, especially if you have multiple VMware Cloud services.

  1. Log into the VMware Cloud console. You see a list of all your organizations.
  2. Select Create Another Organization.
  3. Enter a name for the organization.
  4. Agree to the terms of service and complete the organization setup. After completion, you see your newly created organization in the organization list, and you can select it when you invite new users.

Note: You can finish adding addresses to your organization later in the sign-up process. You won't miss the opportunity because the system prompts you to do this.

Access Your Workspace ONE Services Console

Depending on your subscription purchase, you can access one or more Workspace ONE services.

  1. In the Workspace ONE Cloud Admin Hub console, select the service you want to access. Each service tile has an SSO capable link and logs you into the respective console.
  2. The system creates a user account in the service console using your organization and service role.

Account Creation and Management

Workspace ONE Cloud Admin Hub is registered with VMware Cloud services, so you perform many of the initial setup steps of the Workspace ONE Cloud Admin Hub console in the VMware Cloud console. The Workspace ONE Cloud Admin Hub console is the main console that provides access to all your Workspace ONE services. When you select the initial activation link and create a Cloud Services Organization, the system creates an account for you with an Organization Owner role.

Working as an Organization Owner in the VMware Cloud console, you can add other organizations, users, and assign these users to service roles within your organizations. You can also set up federation with your corporate domain. Federating your corporate domain allows you to use your organization's SSO and identity source to sign-in to VMware Cloud services.

Invite New Users and Assign Them Organization Roles

As an organization owner, you can invite additional users to your organization and assign them organization roles. Inviting a user and assigning them an organization role, enables you to associate them with the Workspace ONE Cloud Admin Hub service within the applicable organization later in this procedure.

Note: Unlike owners, users with organization roles cannot invite others to an organization.

Procedure

  1. In the VMware Cloud console, go to the Identity and Access Management tab. You see a list of all the users currently in your organization.
  2. Select Add Users.
  3. Enter an email address for each user you want to add, separated by a comma, space, or a new line.
  4. Select an organization role to assign.
  5. Select Add.

Results

The system sends invitation emails to each of the users you invited. They can use these emails to activate their accounts.

Invite Users with Organization Roles and Assign Them Service Roles

As an organization owner, not only can you add new users, but you can assign them service roles. This step of assigning the service role to users associates the user to the Workspace ONE Cloud Admin Hub service.

Procedure

  1. In the VMware Cloud console, go to the Identity and Access Management tab. You see a list of all the users currently in your organization.
  2. Select Add Users.
  3. Enter an email address for each user you want to add, separated by a comma, space, or a new line. You can view the organization role you already configured for each Organization Member.
  4. Select + ADD SERVICE ACCESS.
  5. Select Workspace ONE Cloud from the drop-down, and select a service role.
    • Admin: Provides full access to Workspace ONE Cloud Admin Hub and provides access to all entitled Workspace ONE services.
    • Basic: Provides read-only access to Workspace ONE Cloud Admin Hub and provides read-only access to all entitled Workspace ONE services.

Results

The system sends invitation emails to each of the users you invited. They can use these emails to activate their accounts. After the user selects Workspace ONE Cloud Admin Hub and applicable Workspace ONE services, the system creates a user account with the listed default roles.

Role in VMware Cloud Console Role in Workspace ONE Cloud Admin Hub Role in Workspace ONE UEM Role in Workspace ONE Access
Organization Owner Administrator Console Administrator Super Admin
Admin Administrator Console Administrator Super Admin
Basic Auditor Read-Only Read-Only Admin

Federate User Access to VMware Cloud

As an enterprise using VMware Cloud services, you can set up federation with your corporate domain. Federating your corporate domain allows you to use your organization's SSO and identity source to sign in to VMware Cloud services. Federation requires special admin permissions given through the Enterprise Administrator role. Using this role, you can access the VMware Cloud Service Enterprise Federation flow in the Workspace ONE Cloud Admin Hub console by selecting the Getting Started card.

Procedure

Setting up Enterprise Federation is a highly secure task so we have created a special role for this task. It is called the Enterprise Administrator role. As an organization owner, you must invite and assign someone to fill this roll. This person must have permissions to manage your corporate Active Directory or identity provider system. You can invite yourself if that person is you.

  1. In the Workspace ONE Cloud Admin Hub console, select the SET UP link within the Federate Access to VMware Cloud Services getting started card.
  2. Enter the email address of the person who manages your corporate Active Directory or identity provider system.
  3. The person who manages your corporate Active Directory or identity provider system accepts the invitation and is now the Enterprise Administrator. The system navigates the person to a sign-up page for VMware Cloud services.
  4. The Enterprise Administrator signs into VMware Cloud services.
  5. The Enterprise Administrator can start the federation flow following these steps.
    1. Verify your domains and sub-domains.
    2. Install a connector that connects to your on-premises Active Directory system.
    3. Sync users and groups.
    4. Configure your identity provider.
    5. Validate and finish set up.

Results

Your admin users can use your corporate identity to access VMware Cloud services.

Workspace ONE Service Discovery

Workspace ONE Cloud Admin Hub provides easy access to each of the Workspace ONE services you have purchased. It also allows you to discover and learn more about other services. Find many helpful guides to get started with various Workspace ONE services on the Getting Started page.

Access Your Service Console

Workspace ONE Cloud Admin Hub provides access to Workspace ONE service consoles through the Home page. The service tiles you see under My Services are the service tiles you are entitled to use based on your subscription purchases. These service tiles are SSO enabled links. They sign you into your service console using the same identity you established with VMware Cloud services. To log in, select the tile and the system logs you into your service console.

Discover Additional Workspace ONE Services

You can discover additional Workspace ONE services under Available Services. You can select Learn More to explore these other services. Some of these services may also provide free trials that offer a hands-on experience. Use the free trials to validate your use cases. Contact VMware Sales or your partner if you are interested in any of these other services.

Getting Started Page

The Getting Started page organizes helpful guides to get you started on the Workspace ONE services you have purchased. The information is divided into different sections to help you navigate admin functions. The sections help you best use the resources you have with Workspace ONE.