Tenant Role Overview

Tenant roles typically have responsibilities that are limited to a specific tenant and cannot affect other tenants in the system.

Table 1. Tenant Role Overview
Role	Description
Tenant Administrator	Typically a line-of-business administrator, business manager, or IT administrator who is responsible for a tenant. Tenant administrators configure vRealize Automation for the needs of their organizations. They are responsible for user and group management, tenant branding and notifications, and business policies such as approvals and entitlements. They also track resource usage by all users within the tenant and initiate reclamation requests for virtual machines.
Fabric Administrator	Manages physical machines and compute resources assigned to their fabric groups and creates and manages the reservations and policies associated with those resources within the scope of their tenant. They also manage property groups, machine prefixes, and the property dictionary that are used across all tenants and business groups. Note: If you add the fabric administrator role to a system-wide role such as IaaS administrator or system administrator, the fabric administrator can create reservations for any tenant, not just their own.
Blueprint Architects	Umbrella term for the individuals who are responsible for creating blueprint components and assembling the blueprints that define catalog items for consumers to request from the service catalog. These roles are typically assigned to individuals in the IT department, such as architects or analysts.
Catalog Administrator	Creates and manages catalog services and manages the placement of catalog items into services.
Approval Administrator	Defines approval policies. These policies can be applied to catalog requests through entitlements that a tenant administrator or business group manager manage.
Approver	Any user of vRealize Automation, for example, a line manager, finance manager, or project manager, can be designated as an approver as part of an approval policy.
Business Group Manager	Manages one or more business groups. Typically a line manager or project manager. Business group managers entitlements for their groups in the service catalog. They can request and manage items on behalf of users in their groups.
Support User	A role in a business group. Support users can request and manage catalog items on behalf of other members of their groups.
Business User	Any user in the system can be a consumer of IT services. Users can request catalog items from the service catalog and manage their provisioned resources.
Health Consumer	Any user of vRealize Automation, for example, a line manager, finance manager, or project manager, can be designated as a Health Consumer with read-only privileges for Health Service reports.