When you migrate identity stores, you must set up a tenant with a local user account, and assign tenant administrator privileges to the local user account.


Verify that you set a new VMware Identity Manager password. See Update Your Single Sign-On Password for VMware Identity Manager.


  1. Log in to the vRealize Automation console as the default system administrator username administrator, and enter the password.

    The console location is https://vra-appliance/vcac/.

  2. Click your tenant.

    For example, for the default tenant, click vsphere.local.

  3. Select the Local Users tab, and click New.
  4. Create a local user account to assign to the tenant administrator role, and click OK.

    The local user name must be unique to the vsphere.local active directory.

  5. Click the Administrators tab.
  6. In the Tenant administrators search box, enter the local user name and click Enter.
  7. Click Finish.
  8. Repeat these steps for each of your tenants.
  9. Log out of the console.

What to do next