You can assign tenant roles to users in any tenant. The roles have responsibilities that are specific to that tenant.

Table 1. Tenant Roles and Responsibilities

Role

Responsibilities

How Assigned

Tenant administrator

  • Customize tenant branding.

  • Manage tenant identity stores.

  • Manage user and group roles.

  • Create custom groups.

  • Manage notification providers.

  • Enable notification scenarios for tenant users.

  • Configure vRealize Orchestrator servers, plug-ins and workflows for XaaS.

  • Create and manage catalog services.

  • Manage catalog items.

  • Manage actions.

  • Create and manage entitlements.

  • Create and manage approval policies.

  • Monitor tenant machines and send reclamation requests.

The system administrator designates a tenant administrator when creating a tenant. Tenant administrators can assign the role to other users in their tenant at any time from the Administration tab.

Fabric Administrator

  • Manage property groups.

  • Manage compute resources.

  • Manage network profiles.

  • Manage Amazon EBS volumes and key pairs.

  • Manage machine prefixes.

  • Manage property dictionary.

  • Create and manage reservations and reservation policies in their own tenant.

  • If this role is added to a user with IaaS administrator or system administrator privileges, the user can create and manage reservations and reservation policies in any tenant.

The IaaS administrator designates the fabric administrator when creating or editing fabric groups.

Application architect

  • Assemble and manage composite blueprints.

Tenant administrators can assign this role to users in their tenant at any time from the Administration tab.

Infrastructure Architect

  • Create and manage infrastructure blueprint components.

  • Assemble and manage composite blueprints.

Tenant administrators can assign this role to users in their tenant at any time from the Administration tab.

XaaS architect

  • Define custom resource types.

  • Create and publish XaaS blueprints.

  • Create and manage resource mappings.

  • Create and publish resource actions.

Tenant administrators can assign this role to users in their tenant at any time from the Administration tab.

Software Architect

  • Create and manage software blueprint components.

  • Assemble and manage composite blueprints.

Tenant administrators can assign this role to users in their tenant at any time from the Administration tab.

Catalog Administrator

  • Create and manage catalog services.

  • Manage catalog items.

  • Assign icons to actions.

Tenant administrators can assign this role to users in their tenant at any time from the Administration tab.

Business group manager

  • Add and delete users within their business group.

  • Assign support user roles to users in their business group.

  • Create and manage entitlements for their business group.

  • Request and manage items on behalf of a user in their business group.

  • Monitor resource usage in a business group.

  • Change machine owner.

The tenant administrator designates the business group manager when creating or editing business groups.

Approval administrator

  • Create and manage approval policies.

Tenant administrators can assign this role to users in their tenant at any time from the Administration tab.

Approver

  • Approve service catalog requests, including provisioning requests or any resource actions.

The tenant administrator or approval administrator creates approval policies and designates the approvers for each policy.

Support user

  • Request and manage items on behalf of other users in their business group.

  • Change machine owner.

The tenant administrator designates the support user when creating or editing business groups.

Business user

  • Request catalog items from the service catalog.

  • Manage their provisioned resources.

The tenant administrator designates the business users who can consume IT services when creating or editing business groups.