You must set up a tenant with a local user account and assign tenant administrator privileges to the local user account.

Repeat this procedure for each of your tenants.


Verify that you have set a new VMware Identity Manager password. See Update Your Single Sign-On Password for VMware Identity Manager.


  1. Log in to the vRealize Automation console with the default system administrator user name administrator and password.

    The console location is https://vra-appliance/vcac/.

  2. Click Administration > Tenants.

    Click a tenant name, for example, for the default tenant, click vsphere.local.

  3. Select the Local Users tab.
  4. Click New.
  5. Create a local user account.

    You assign the tenant administrator role to this user. Verify that the local user name is a unique user for your tenant and will not conflict with your Active Directory users.

  6. Click OK.
  7. Click Administrators.
  8. Enter the local user name in the Tenant administrators search box and press Enter.
  9. Click Finish.
  10. Log out of the console.

What to do next

Synchronize Users and Groups for an Active Directory Link.