To ensure security of the objects in your vRealize Operations Cloud instance, as a system administrator you can manage some aspects of user access control. You can assign each user to be a member of one or more user groups, and assign roles to each user or user group to set their privileges.

Users must have privileges to access specific features in the vRealize Operations Cloud user interface. Access control is defined by assigning privileges to both users and objects. You can assign one or more roles to users, and enable them to perform a range of different actions on the same types of objects. For example, you can assign a user with the privileges to delete a virtual machine, and assign the same user with read-only privileges for another virtual machine.

User Access Control

You can federate vRealize Operations Cloud with Active Directory using the Cloud Services Platform (CSP). For federating Identity and Access Management to Active Directory, see Setting Up Federated Identity Management.