Getting Started with Workspace ONE Cloud Admin Hub

Follow the outlined procedures to get your Workspace ONE Cloud Admin Hub up and running. Access your VMware Cloud console to create and manage user accounts for the hub. Then, you can federate your corporate domain to use your organization's SSO and identity source to sign-in to VMware Cloud services and the Workspace ONE Cloud Admin Hub.

VMware Cloud Product Documentation

Find content about VMware Cloud services by accessing What is VMware Cloud. To learn about organization roles and permissions for VMware Cloud services, access Managing Roles and Permissions.

First Steps: Log In to VMware Cloud Console and access Workspace ONE Cloud Admin Hub

Step 1: Read Your Service Welcome Email

After you make your subscription purchase (either through VMware Sales or through your partner) or after you request a trial, VMware sends a service welcome email to the email ID associated with the order or trial request.

  1. Find your Welcome to Workspace ONE email that includes your unique service activation link. If you haven't seen the email, check your spam messages or corporate spam filter. The unique service activation directs you to the VMware Cloud console. It is important to use this service activation link when you log in to the VMware Cloud console for the first time.

    Your Welcome to Workspace ONE email contains a specific link to activate your service.

  2. If you still cannot find the email, ask your VMware Sales Specialist or Customer Success Manager to resend the email or to provide you with the service activation link.

Step 2: Log In to Your VMware Cloud Console

The service activation link provided to you in the welcome email directs you to the VMware Cloud console.

  1. Click the service activation link provided to you in the welcome email.

    Use the Get Started button to begin the activation process to log in to your VMware Cloud Console.

  2. Use the email and password from your My VMware account to log in. If you do not have a My VMware account, create one and fill in all mandatory fields.

    Sign in or create an account for VMware Cloud Services

Step 3: Join Your Workspace ONE Cloud Admin Hub to a Cloud Services Organization

A Cloud Services Organization is a logical container for all your Workspace ONE Cloud Admin Hub services. VMware Cloud services uses organizations to control access to your cloud services. To access a cloud service, you must belong to an organization. For details about organizations in VMware Cloud services, access the topic Managing Your Organizations.

To join an organization, attach or couple your Workspace ONE Cloud Admin Hub to a Cloud Services Organization. This action grants you access to the Workspace ONE Cloud Admin Hub console.

On the VMware Cloud Services console, you can see all your services in the My Services section and see More Services available to you.

  1. After you log in to the VMware Cloud console, you see a list of organizations that were previously added to your service. You can create a new organization if you don't have an organization added by following the process in the Create a Cloud Services Organization section.
  2. After you add Workspace ONE Cloud Admin Hub to a Cloud Services Organization, the system logs you into your Workspace ONE Cloud Admin Hub console.

(Optional) Create a Cloud Services Organization

After you log in to the VMware Cloud console, you see a list of organizations that are associated with your account. To help simplify your environment, you can add an organization for each new service. Although this step is optional, consider its streamlining advantages, especially if you have multiple VMware Cloud services.

  1. Log into the VMware Cloud console. You see a list of all your organizations. In the VMware Cloud Services console, you can create an organization with the Create Organization button.
  2. Select Create Organization.
  3. Enter a name for the organization. On the Organization Setup page in the VMware Cloud console, enter a name in the Organization Name field
  4. Agree to the terms of service and complete the organization setup. After completion, you see your newly created organization in the organization list, and you can select it when you invite new users.

Note: You can finish adding addresses to your organization later in the sign-up process. You won't miss the opportunity because the system prompts you to do this.

Step 4: Access Your Workspace ONE Services Console

Depending on your subscription purchase, you can access one or more Workspace ONE services.

Access your Workspace ONE services in the Workspace ONE Cloud Admin Hub.

  1. In the Workspace ONE Cloud Admin Hub console, select the service you want to access. Each service tile has an SSO capable link and logs you into the respective console.
  2. The system creates a user account in the service console using your organization and service role.

Next Steps: Account Creation, Inviting Other Admins, and Federation

The Workspace ONE Cloud Admin Hub console is the main console that provides access to all your Workspace ONE services. When you select the initial activation link and create a Cloud Services Organization, the system creates an account for you with an Organization Owner role.

Workspace ONE Cloud Admin Hub is registered with VMware Cloud services, so you perform many of the initial setup steps for the Workspace ONE Cloud Admin Hub console in the VMware Cloud console.

Working as an Organization Owner in the VMware Cloud console, you can add other organizations, users, and assign these users to service roles within your organizations. You can also set up federation with your corporate domain. Federating your corporate domain allows you to use your organization's SSO and identity source to sign-in to VMware Cloud services.

Invite New Users and Assign Them Organization Roles

As an organization owner, you can invite additional users to your organization and assign them organization roles. Inviting a user and assigning them an organization role, enables you to associate them with the Workspace ONE Cloud Admin Hub service within the applicable organization later in this procedure.

Note: Unlike owners, users with organization roles cannot invite others to an organization.

Procedure

  1. In the VMware Cloud console, go to the Identity and Access Management tab. You see a list of all the users currently in your organization. Working in the VMware Cloud console, find the Identity and Access Management tab.
  2. Select Add Users. Select the Add Users link on the VMware Cloud console > Identity and Access Management > Active Users page.
  3. Enter an email address for each user you want to add, separated by a comma, space, or a new line. Add new users with email addresses on the Add New Users page in the VMware Cloud console.
  4. Select an organization role to assign.
    This process is outlined in the Invite Users with Organization Roles and Assign Them Service Roles section.
  5. Select Add.

Results

The system sends invitation emails to each of the users you invited. They can use these emails to activate their accounts.

Invite Users with Organization Roles and Assign Them Service Roles

As an organization owner, not only can you add new users, but you can assign them service roles. This step of assigning the service role to users associates the user to the Workspace ONE Cloud Admin Hub service.

Procedure

  1. In the VMware Cloud console, go to the Identity and Access Management tab. You see a list of all the users currently in your organization.
  2. Select Add Users.
  3. Enter an email address for each user you want to add, separated by a comma, space, or a new line. You can view the organization role you already configured for each Organization Member.
  4. Select + ADD SERVICE ACCESS. Use the Add Services Access link to add the Workspace ONE service role to an organization member.
  5. Select Workspace ONE from the drop-down, and select a service role.
    • Admin: Provides full access to Workspace ONE Cloud Admin Hub and provides access to all entitled Workspace ONE services.
    • Basic: Provides read-only access to Workspace ONE Cloud Admin Hub and provides read-only access to all entitled Workspace ONE services. In the VMware Cloud console, use the Assign Service Roles menu item to select the Workspace ONE service with the admin role.

Results

The system sends invitation emails to each of the users you invited. They can use these emails to activate their accounts. After the user selects Workspace ONE Cloud Admin Hub and applicable Workspace ONE services, the system creates a user account with the listed default roles.

Role in VMware Cloud Console Role in Workspace ONE Cloud Admin Hub Role in Workspace ONE UEM Role in Workspace ONE Access
Organization Owner Administrator Console Administrator Super Admin
Admin Administrator Console Administrator Super Admin
Basic Auditor Read-Only Read-Only Admin

Federate User Access to VMware Cloud

Enable single sign-on for your users to access VMware Cloud services by federating multiple corporate domains. Use a self-service workflow to configure federation with VMware Cloud services in the Workspace ONE Cloud Admin Hub, the Getting Started section. The workflow supports integration with SAML 2.0 based identity providers. To learn more about the federation process, access Setting Up Enterprise Federation with VMware Cloud Services.

Procedure

Setting up Enterprise Federation is a highly secure task so we have created a special role for this task. It is called the Enterprise Administrator role. As an organization owner, you must invite and assign someone to fill this roll. This person must have permissions to manage your corporate Active Directory or identity provider system. You can invite yourself if that person is you.

  1. In the Workspace ONE Cloud Admin Hub console, select the SET UP link within the Federate Access to VMware Cloud Services getting started card. Access the federate access to VMware Cloud Services feature from the Workspace ONE Cloud Admin Hub console.
  2. Enter the email address of the person who manages your corporate Active Directory or identity provider system.
  3. The person who manages your corporate Active Directory or identity provider system accepts the invitation and is now the Enterprise Administrator. The system navigates the person to a sign-up page for VMware Cloud services.
  4. The Enterprise Administrator signs into VMware Cloud services.
  5. The Enterprise Administrator can start the federation flow following these steps.
    1. Verify your domains and sub-domains.
    2. Install a connector that connects to your on-premises Active Directory system.
    3. Sync users and groups.
    4. Configure your identity provider.
    5. Validate and finish set up.

Results

Your admin users can use your corporate identity to access VMware Cloud services.

Workspace ONE Service Discovery

Workspace ONE Cloud Admin Hub provides easy access to each of the Workspace ONE services you have purchased. It also allows you to discover and learn more about other services.

Access Your Service Console

Workspace ONE Cloud Admin Hub provides access to Workspace ONE service consoles through the Home page. The service tiles you see under My Services are the service tiles you are entitled to use based on your subscription purchases. These service tiles are SSO enabled links. They sign you into your service console using the same identity you established with VMware Cloud services. To log in, select the tile and the system logs you into your service console.

In the Workspace ONE Cloud Admin Hub, select the My Services filter to see your unique services.

Discover Additional Workspace ONE Services

You can discover additional Workspace ONE services under Available Services. You can select Learn More to explore these other services. Some of these services may also provide free trials that offer a hands-on experience. Use the free trials to validate your use cases. Contact VMware Sales or your partner if you are interested in any of these other services.

In the Workspace ONE Cloud Admin Hub, select the Available Service filter to see services you might want to use in the future.

Find Services on the Getting Started Page

Find many helpful guides to get started with various Workspace ONE services on the Getting Started page. The information is divided into different sections to help you navigate admin functions. The sections help you best use the resources you have with Workspace ONE.

In the Workspace ONE Cloud Admin Hub, see all your Workspace ONE services on the Getting Started page and find new ones.

check-circle-line exclamation-circle-line close-line
Scroll to top icon