You must verify that you have the roles and credentials to install vRealize Automation components.

vCenter Service Account

If you plan to use a vSphere endpoint, you need a domain or local account that has the appropriate level of access configured in vCenter.

Virtual Appliance Installation

To deploy the vRealize Automation appliance, you must have the appropriate privileges on the deployment platform (for example, vSphere administrator credentials).

During the deployment process, you specify the password for the virtual appliance administrator account. This account provides access to the vRealize Automation appliance management console from which you configure and administer the virtual appliances.

IaaS Installation

Before installing IaaS components, add the user under which you plan to execute the IaaS installation programs to the Administrator group on the installation host.

IaaS Database Credentials

You can create the database during product installation or create it manually in the SQL server.

When you create or populate an MS SQL database through vRealize Automation, either with the Installation Wizard or through the management console, the following requirements apply:

  • If you use the Use Windows Authentication option, the sysadmin role in SQL Server must be granted to the user executing the Management Agent on the primary IaaS web server to create and alter the size of the database.

  • If you do not select Use Windows Authentication, the sysadmin role in SQL Server must be also be granted to the user executing the Management Agent on the primary IaaS web server. The credentials are used at runtime.

  • If you populate a pre-created database through vRealize Automation, the user credentials you provide (either the current Windows user or the specified SQL user) need only dbo privileges for the IaaS database.


vRealize Automation users also require the correct level of Windows authentication access to log in and use vRealize Automation.

IaaS Service User Credentials

IaaS installs several Windows services that share a single service user.

The following requirements apply to the service user for IaaS services:

  • The user must be a domain user.

  • The user must have local Administrator privileges on all hosts on which the Manager Service or Web site component is installed. Do not do a workgroup installation.

  • The user is configured with Log on as a service privileges. This privilege ensures that the Manager Service starts and generates log files.

  • The user must have dbo privileges for the IaaS database. If you use the installer to create the database, ensure that the service user login is added to SQL Server prior to running the installer. The installer grants the service user dbo privileges after creating the database.

  • The installer is run under the account that runs the Management Agent on the primary Web server. If you want to use the installer to create an MS SQL database during installation, you must have the sysadmin role enabled under MS SQL. This is not a requirement if you choose to use a pre-created empty database.

  • The domain user account that you plan to use as the IIS application pool identity for the Model Manager Web Service is configured with Log on as batch job privileges.

Model Manager Server Specifications

Specify the Model Manager server name by using a fully qualified domain name (FQDN). Do not use an IP address to specify the server.