A vCenter Single Sign-On administrator user can manage users and groups in the vsphere.local domain from the vSphere Client.

The vCenter Single Sign-On administrator user can perform the following tasks.