You can manage the user groups associated with the users and objects in your environment. You can import user groups from an LDAP database that resides on another machine, or from a single sign-on server.

Where You Manage User Groups

  1. To manage user groups, in the menu, click Administration, and then in the left pane click Access > Access Control.

  2. Click the User Groups tab.

Table 1. Access Control User Groups Summary Grid



User Groups toolbar

To manage user groups, use the toolbar icons.

  • Add icon. Add a user group, and provide the details for the user group in the Add User Group dialog box.

  • Edit icon. Edit the selected user group, and modify the details for the user group in the Edit User Group dialog box.

  • Clone Group icon. Clone a user group, and type a name and description for the cloned user group.

  • Delete icon. Delete a user group.

  • Import Group icon. Import a user group, and provide the details to import the user group in the Import User Groups dialog box.

Group Name

Name of the user group.


Description of the group, indicating its purpose.


Number of members in the group.

Group Type

Type of group, either a local user group or a group imported from LDAP.

Distinguished Name

Names for LDAP objects, such as domains and users.

Access All Objects

Indicates if the user group account is allowed to access all of the objects that are imported into the vRealize Operations Manager instance.

After you select a user group in the summary grid, view details about associated users in the Details pane.

Table 2. Access Control User Groups Details Grid



User Accounts

You can add members to the selected group, view only the selected or deselected members in the group, or search for a member. You can remove a user from the group by selecting the user in the Details pane and clicking Delete.

  • User Name: Name of each user who is a member of the selected group.

  • First Name: First name of each user in the group.

  • Last Name: Last name of each user in the group.


View the permissions of the role associated with the user group. To add or remove roles, view only the selected or deselected roles, or search for a specific role, click the Edit icon.

  • Role Name: Indicates the roles assigned to the selected user group.

  • Role Description: Description for the selected user group, defined when you created the group.

  • Object Hierarchy: The names of the object hierarchies assigned to the group while holding a specific role.

  • Objects: The number of objects the user group can access within the selected hierarchy.