You can add user accounts so that users can access the features of vRealize Operations and certain objects in the environment. Or, modify user accounts to change their attributes, deactivate or lock the accounts, or require them to change their password. After you add user accounts, you can assign them to one or more user groups, and assign roles and scopes. Assign the administrators role only to specific users who must access objects and perform actions in the entire environment.

Where You Add or Edit User Accounts

  1. To add a user account, from the left menu, click Administration, and then click the Access Control tile.
  2. In the User Accounts tab, click Add.
  3. To edit a user account, click the vertical ellipsis and select Edit. You can also click the EDIT ACCOUNT button in the User Details page and edit the user account.
    • By default, the user is added to the "Everyone" group. You can add or remove users to or from the user group when you create or edit the user group, . You can assign the permissions to the users by selecting the required role-scope pairs.
    • When you add users to a user group, the user inherits the permissions (role-scope pairs) from that group. You also have the option of not assigning permissions to the user, in that case the user actions are restricted, and the user cannot login to vRealize Operations.
    • You cannot change the user name once you create it. So, select your username appropriately.
    • You have read only access for the Super Administrator account. You can change the password for the Super Administrator account from the user interface only.
    Table 1. Add or Edit Users Accounts- User Details Page
    User Details Options Description

    User Name

    User name, without spaces to access the vRealize Operations

    Password

    User's password to access the vRealize Operations instance.

    Confirm Password

    Confirmation of the user's password.

    Require password change at next login

    Users can change their password the next time they log in to the vRealize Operations instance.

    Deactivate this user

    Deactivate the user account so that a user cannot access the vRealize Operations instance.

    First Name

    User's first name, created when you create the user account.

    Last Name

    User's last name, created when you create the user account.

    Email Address

    User's email address, created when you create the user account.

    Description

    Description of the user account, defined when you create the user account. This information can identify the type of user and a summary of their access rights.

    Assign Roles and Scope

    The Assign Roles and Scope option lets you select a role for each user and then assign a scope for that role.

  4. From the Select Role drop-down menu, select a role for the user.
  5. From the Select Scope drop-down menu, assign a scope for the selected user.
    Note: You can click the + sign to add multiple roles and then assign the required scope for each role.

    Assign User Groups

    The Assign User Group option lets you select user groups that the user will be a member of.

  6. Select the user groups for which you want the user to be member of.
  7. Click Save.
    Note: You cannot manually add users to groups imported from LDAP and SSO.