You can import user accounts so that users can access the features of vRealize Operations and the objects in the environment. After you import user accounts, you can assign them to user groups and roles. You can also specify the objects users can access while using the assigned roles.
Where You Import User Accounts
- To import user accounts, from the left menu, click Administration, and then click the Access Control tile.
- Click the horizontal ellipsis next to Add and then, click Import Users.
Table 1. Import Users from a LDAP Source User Details Options Description Import From
LDAP host machine, Active Directory, or Other sources configured to import user accounts.
- Add icon. Add an LDAP import source, and provide the information for the LDAP import source in the Add Source for User and Group Import dialog box.
- Edit icon. Edit the selected LDAP import source, and modify the details in the Edit Source for User and Group Import dialog box.
User Name
Click Change Credentials to display the user name of the LDAP source credential used to import user accounts to the vRealize Operations instance. Password
Password for the LDAP source credential to import user accounts to the vRealize Operations instance.
Search String
Enter a search string, and click Search to start the search for user accounts.
User Name Summary grid
Lists the users available for import. Select the check box for each user to import, or select the User Name check box to import all users. User accounts that are already imported to vRealize Operations do not appear in the list.
Table 2. Import Users from a VMware Identity Manager Source User Details Options Description Import From
VMware Identity Manager configured as the source to import user accounts.
- Add icon. Add a VMware Identity Manager import source, and provide the information for the VMware Identity Manager import source in the Add Source for User and Group Import dialog box.
- Edit icon. Edit the selected VMware Identity Manager import source, and modify the details in the Edit Source for User and Group Import dialog box.
Domain Name
Enter the domain name for import.
Search Prefix
Enter a search string, and click Search to start the search for user accounts.
User Name Summary grid
Lists the users available for import. Select the check box for each user to import, or select the User Name check box to import all users. To appear in the list, the user configuration must be set to primary group in the default domain user group. User accounts that are already imported to vRealize Operations do not appear in the list.
Table 3. Import Users from a Single Sign On Source User Details Options Description Import From
SSO source configured as the source to import user accounts.
- Add icon. Add an SSO import source, and provide the information for the SSO import source in the Add Source for User and Group Import dialog box.
- Edit icon. Edit the selected SSO import source, and modify the details in the Edit Source for User and Group Import dialog box.
Domain Name
Enter the domain name for import.
Result Limit
Determines the number of users displayed.
Search Prefix
Enter a search prefix, and click Search to start the search for user accounts.
User Name Summary grid
Lists the users available for import. Select the check box for each user to import, or select the User Name check box to import all users. To appear in the list, the user configuration must be set to primary group in the default domain user group. User accounts that are already imported to vRealize Operations do not appear in the list.
- After you enter the import users details, click Next.
Table 4. Import Users Accounts- Assign Groups and Permissions Page Assign Groups Roles, and Objects Options Description Groups
Select or deselect the groups associated with the user account. To select or deselect all accounts, click the Group Name check box. You cannot add user accounts to groups imported from LDAP.
Objects
Select or deselect roles in the Select Role drop-down menu. When you have selected a role, click the Assign this role to the user check box. You can assign more than one role to a user account.
Select which objects the user can access when assigned this role.
- Select Object Hierarchies: Displays groups of objects. Select an object in this list to select all the objects in the hierarchy,
- Select Object: To select specific objects within the object hierarchy, click the down arrow to expand the list of objects. For example, expand the Adapter Instance hierarchy, and select one or more adapters.
- Allow access to all objects in the system: Select this check box to permit the user account access to all objects in the system.