You can remove members from a vCenter Single Sign-On group by using the vSphere Web Client or the Platform Services Controller Web interface. When you remove a member (user or group) from a group, you do not delete the member from the system.

Procedure

  1. From a Web browser, connect to the vSphere Web Client or the Platform Services Controller.

    Option

    Description

    vSphere Web Client

    https://vc_hostname_or_IP/vsphere-client

    Platform Services Controller

    https://psc_hostname_or_IP/psc

    In an embedded deployment, the Platform Services Controller host name or IP address is the same as the vCenter Server host name or IP address.

  2. Specify the user name and password for administrator@vsphere.local or another member of the vCenter Single Sign-On Administrators group.

    If you specified a different domain during installation, log in as administrator@mydomain.

  3. Navigate to the vCenter Single Sign-On user configuration UI.

    Option

    Description

    vSphere Web Client

    1. From the Home menu, select Administration.

    2. Under Single Sign-On, click Users and Groups.

    Platform Services Controller

    Click Single Sign-On and click Users and Groups.

  4. Select the Groups tab and click the group.
  5. In the list of group members, select the user or group that you want to remove and click the Remove Member icon.
  6. Click OK.

Results

The user is removed from the group, but is still available in the system.