You must set up a tenant with a local user account and assign tenant administrator privileges to the local user account.

Repeat this procedure for each of your tenants.


Verify that you have set a new VMware Identity Manager password. See Update Your Single Sign-On Password for VMware Identity Manager.


  1. Log in to the vRealize Automation console with the default system administrator user name administrator and password.

    The console location is https://vra-appliance/vcac/.

  2. Click your tenant.

    For example, for the default tenant, click vsphere.local.

  3. Select the Local Users tab.
  4. Click New.
  5. Create a local user account.

    You assign the tenant administrator role to this user. Verify that the local user name is unique to the vsphere.local active directory.

  6. Click OK.
  7. Click Administrators.
  8. Enter the local user name in the Tenant administrators search box and press Enter.
  9. Click Finish.
  10. Log out of the console.

What to do next

Synchronize Users and Groups for an Active Directory Link.