Follow the outlined procedures to get your Workspace ONE Cloud Admin Hub up and running. Access your VMware Cloud console to create and manage user accounts for the hub. Then, you can federate your corporate domain to use your organization's SSO and identity source to sign-in to VMware Cloud services and the Workspace ONE Cloud Admin Hub.
After you make your subscription purchase (either through VMware Sales or through your partner) or after you request a trial, VMware sends a service welcome email to the email ID associated with the order or trial request.
The service activation link provided to you in the welcome email directs you to the VMware Cloud console.
A Cloud Services Organization is a logical container for all your Workspace ONE Cloud Admin Hub services. In the VMware Cloud console, attach or couple your Workspace ONE Cloud Admin Hub to a Cloud Services Organization so you can access the Workspace ONE Cloud Admin Hub console.
After you log in to the VMware Cloud console, you see a list of organizations that are associated with your account. To help simplify your environment, you can add an organization for each new service. Although this step is optional, consider its streamlining advantages, especially if you have multiple VMware Cloud services.
Note: You can finish adding addresses to your organization later in the sign-up process. You won't miss the opportunity because the system prompts you to do this.
Depending on your subscription purchase, you can access one or more Workspace ONE services.
Workspace ONE Cloud Admin Hub is registered with VMware Cloud services, so you perform many of the initial setup steps of the Workspace ONE Cloud Admin Hub console in the VMware Cloud console. The Workspace ONE Cloud Admin Hub console is the main console that provides access to all your Workspace ONE services. When you select the initial activation link and create a Cloud Services Organization, the system creates an account for you with an Organization Owner role.
Working as an Organization Owner in the VMware Cloud console, you can add other organizations, users, and assign these users to service roles within your organizations. You can also set up federation with your corporate domain. Federating your corporate domain allows you to use your organization's SSO and identity source to sign-in to VMware Cloud services.
As an organization owner, you can invite additional users to your organization and assign them organization roles. Inviting a user and assigning them an organization role, enables you to associate them with the Workspace ONE Cloud Admin Hub service within the applicable organization later in this procedure.
Note: Unlike owners, users with organization roles cannot invite others to an organization.
The system sends invitation emails to each of the users you invited. They can use these emails to activate their accounts.
As an organization owner, not only can you add new users, but you can assign them service roles. This step of assigning the service role to users associates the user to the Workspace ONE Cloud Admin Hub service.
The system sends invitation emails to each of the users you invited. They can use these emails to activate their accounts. After the user selects Workspace ONE Cloud Admin Hub and applicable Workspace ONE services, the system creates a user account with the listed default roles.
|Role in VMware Cloud Console||Role in Workspace ONE Cloud Admin Hub||Role in Workspace ONE UEM||Role in Workspace ONE Access|
|Organization Owner||Administrator||Console Administrator||Super Admin|
|Admin||Administrator||Console Administrator||Super Admin|
As an enterprise using VMware Cloud services, you can set up federation with your corporate domain. Federating your corporate domain allows you to use your organization's SSO and identity source to sign in to VMware Cloud services. Federation requires special admin permissions given through the Enterprise Administrator role. Using this role, you can access the VMware Cloud Service Enterprise Federation flow in the Workspace ONE Cloud Admin Hub console by selecting the Getting Started card.
Setting up Enterprise Federation is a highly secure task so we have created a special role for this task. It is called the Enterprise Administrator role. As an organization owner, you must invite and assign someone to fill this roll. This person must have permissions to manage your corporate Active Directory or identity provider system. You can invite yourself if that person is you.
Your admin users can use your corporate identity to access VMware Cloud services.
Workspace ONE Cloud Admin Hub provides easy access to each of the Workspace ONE services you have purchased. It also allows you to discover and learn more about other services. Find many helpful guides to get started with various Workspace ONE services on the Getting Started page.
Workspace ONE Cloud Admin Hub provides access to Workspace ONE service consoles through the Home page. The service tiles you see under My Services are the service tiles you are entitled to use based on your subscription purchases. These service tiles are SSO enabled links. They sign you into your service console using the same identity you established with VMware Cloud services. To log in, select the tile and the system logs you into your service console.
You can discover additional Workspace ONE services under Available Services. You can select Learn More to explore these other services. Some of these services may also provide free trials that offer a hands-on experience. Use the free trials to validate your use cases. Contact VMware Sales or your partner if you are interested in any of these other services.
The Getting Started page organizes helpful guides to get you started on the Workspace ONE services you have purchased. The information is divided into different sections to help you navigate admin functions. The sections help you best use the resources you have with Workspace ONE.