As part of upgrading identity stores, you must set up a tenant with a local user account and assign tenant administrator privileges to the local user account.


Verify that you have set a new VMware Identity Manager password. See Update Your Single-Sign On to the VMware Identity Manager Utility.


  1. Log in to the vRealize Automation console with the default system administrator username administrator and password.

    The console location is https://vra-appliance/vcac/.

  2. Click your tenant.

    For example, for the default tenant, click vsphere.local

  3. Select the Local Users tab.
  4. Click New.
  5. Create a local user account to assign to the tenant administrator role.

    The local user name should be unique to the vsphere.local active directory.

  6. Click OK.
  7. Click the Administrators tab.
  8. Enter the local user name in the Tenant administrators search box and press Enter.
  9. Click Finish.
  10. Repeat these steps for each of your tenants.
  11. Log out of the console.

What to do next

Connect Your Active Directory to Synchronize Users and Groups