You can add user accounts so that users can access the features of vRealize Operations Manager and certain objects in the environment. Or, modify user accounts to change their attributes, disable or lock the accounts, or require them to change their password.

Where You Add or Edit User Accounts

You can add a user account, by selecting Administration > Access Control, and clicking the Add icon on the User Accounts toolbar. You can edit a user account, by selecting an account and clicking the Edit icon.

Table 1. Access Control Add or Edit User Workspace - User Details Page

User Details Options

Description

User Name

User name, without spaces, that will log in to vRealize Operations Manager.

Password

User's password to access the vRealize Operations Manager instance.

Confirm Password

Confirmation of the user's password.

First Name

User's first name, created when you create the user account.

Last Name

User's last name, created when you create the user account.

Email Address

User's email address, created when you create the user account.

Description

Description of the user account, defined when you create the user account. This information can identify the type of user and a summary of their access rights.

Disable this user

Disable the user account so that a user cannot access the vRealize Operations Manager instance.

Account is locked out

Indicates that vRealize Operations Manager has locked the user account.

Require password change at next login

Enable to require users to change their password the next time they log in to the vRealize Operations Manager instance.

Table 2. Access Control Add or Edit User Workspace - Assign Groups and Permissions Page

Assign Groups Roles, and Objects Options

Description

Groups

Select or deselect the groups associated with the user account. To select or deselect all accounts, click the Group Name check box. You cannot add user accounts to groups that you imported from an LDAP database.

Objects

Roles determine which actions a user can perform in the system. Select a role from the Select Role drop-down menu, and then select the Assign this role to the user checkbox. You can associate more than one role with the user account.

Select which objects the user can access when assigned this role.

  • Select Object Hierarchies: Displays groups of objects. Select an object in this list to select all the objects in the hierarchy,

  • Select Object: To select specific objects within the object hierarchy, click the down arrow to expand the list of objects. For example, expand the Adapter Instance hierarchy, and select one or more adapters.

  • Allow access to all objects in the system: Select this check box to permit the user account access to all objects in the system.

Note:

When you assign a user permission to take action on a parent object, such as an adapter, that user can perform the same action on all the parent's child objects. For example, if a user has permission to access the vRealize Operations Manager adapter, that user can access all the virtual machines associated with the adapter. This is true even if the same user holds another role that permits limited access to only one specific virtual machine.