A vCenter Single Sign-On administrator user can manage users and groups in the vsphere.local domain from the vSphere Web Client.

The vCenter Single Sign-On administrator user can perform the following tasks.

Note:

Do not delete any of the groups that are predefined in the vsphere.local domain. Unexpected errors with authentication might result.