Business groups are used to associate a set of services and resources to a set of users. These groups often correspond to a line of business, department, or other organizational unit. You create a business group so that you can configure reservations and entitle users to provision service catalog items for the business group members.

To add multiple users to a business group role, you can add multiple individual users, or you can add multiple users at the same time by adding an identity store group or a custom group to a role. For example, you can create a custom group Sales Support Team and add that group to the support role. You can also use existing identity store user groups. The users and groups you choose must be valid in the identity store.

To support vCloud Director integration, the same business group members in the vRealize Automation business group must also be members of the vCloud Director organization.

After a tenant administrator creates the business group, the business group manager has permission to modify the manager email address and the members. The tenant administrator can modify all the options.

This procedure assumes that IaaS is installed and configured.


  • Log in to vRealize Automation as a tenant administrator.

  • If you want to add machines created by business group members to a particular Active Directory organizational unit, configure the Active Directory policy. See Create an Active Directory Policy. You can and apply the policy when you create the business group, or add it later.
  • If you want to provide a default machine prefix for the group that is prepended to provisioned machine names, request a prefix from a fabric administrator. See Configure Machine Prefixes. Machine prefixes are not applicable to XaaS requests.


  1. Select Administration > Users and Groups > Business Groups.
  2. Click the New icon (Add).
  3. Configure the business group details.
    Option Description
    Name Enter the name for the business group.
    Description Enter the description.
    Send capacity alert emails to Enter one or more email addresses of users that must receive capacity alert notifications. Email alias addresses are not supported, each email addresses must be for a specific user.

    Separate multiple entries with a comma. For example,,

    Active Directory Policy Select the default Active Directory policy for the business group.
  4. Add custom properties.
  5. Click Next to move to the Members page.
  6. Enter a user name or custom user group name and press Enter.
    You can add one or more individuals or custom user groups to the business group. You can specify the users now or you can create empty business groups to populate later.
    Option Description
    Group manager role Can create entitlements and assign approval policies for the group.
    Support role Can request and manage service catalog items on behalf of the other members of the business group.
    Shared access role Can use and run actions on the resources that other business group members deploy.
    User role Can request service catalog items to which they are entitled.
  7. Click Next to move to the Infrastructure page.
  8. Configure default infrastructure options.
    Option Description
    Default machine prefix Select a preconfigured machine prefix for the business group.

    This prefix is used by machine blueprints. If the blueprint uses the default prefix and you do not provide it here, a machine prefix is created based on the business group name. The best practice is to provide a default prefix. You can still configure blueprints with specific prefixes or allow service catalog users to override it when they request a blueprint.

    XaaS blueprints do not use default machine prefixes. If you configure a prefix here and entitle an XaaS blueprint to this business group, it does not affect the provisioning of an XaaS machine.

    Active Directory container Enter an Active Directory container. This option applies only to WIM provisioning.

    Other provisioning methods require extra configuration to join provisioned machines to an AD container.

  9. Click Finish.


Tenant administrators can allocate resources to your business group by creating a reservation. Business group managers can create entitlements for members of the business group.

What to do next