You create the Create a user in a group XaaS blueprint so that you can run the workflow that adds an Active Directory user and assigns the user to an Active Directory group. You can create the blueprint as a standalone XaaS blueprint or as a blueprint component. In this scenario, you are creating a standalone blueprint.


  • Verify that you create a custom resource action that supports provisioning Active Directory users. See Create a Test User as a Custom Resource.
  • Log in to the vRealize Automation console as an XaaS architect.


  1. Select Design > XaaS > XaaS Blueprints.
  2. Click the New icon (Add).
  3. In the Select a workflow pane, navigate to Orchestrator > Library > Microsoft > Active Directory > User and select the Create a user in a group workflow.
  4. Click Next.
  5. Configure the General tab options.
    1. Change the name of the blueprint to Create a test user, and leave the description as is.
    2. Deselect the Make available as a component in the design canvas check box.
      You are publishing this blueprint directly to the service catalog rather than using it as a blueprint component in the design canvas. You do not need to configure any scale-in or scale-out workflows.
      The Component Lifecycle tab is removed from the user interface.
  6. Click Next.
  7. Edit the blueprint form.
    1. Click The domain name in Win2000 form.
    2. Click the Constraints tab.
    3. Click the Value drop-down arrow, select Constant in the drop-down menu, and enter test.domain.
    4. Click the Visible drop-down arrow, select Constant in the drop-down menu, and select No in the drop-down menu.
      You made the domain name invisible to the consumer of the catalog item.
    5. Click Apply to save the changes.
  8. Click Next.
  9. Select newUser [Test User] as an output parameter to be provisioned.
  10. Click Next.
  11. Click Finish.
  12. On the XaaS Blueprints page, select the Create a test user row and click Publish.


You created a blueprint for creating a test user and you made the blueprint available to add to a service.

What to do next

Create an action to run on the provisioned user account. See Create a Resource Action to Change a User Password.