You import user groups from a single sign-on server, VMware Identity Manager, Active Directory, or an LDAP database on another machine so that you can use those groups in vRealize Operations.

Where You Import User Groups

  1. To import a user group, from the left menu, click Administration, and then click the Access Control tile.
  2. Select User Groups tab, click the horizontal ellipsis next to ADD button and select Import.

    The options displayed in the Import User Groups page depend upon the authentication source you select.

    Table 1. Import User Groups Page - LDAP, Active Directory, and Others Sources
    Option Description

    Import From

    Host machine configured as the source to import the user groups. These options are displayed when the host machine of an LDAP, Active Directory, or Other source is selected.

    User Name

    User name of the source credential to import user groups to the vRealize Operations instance.

    Password

    Password for the source credential to import user groups to the vRealize Operations instance.

    Search String

    Invoke the search for user groups.

    Advanced

    Displays the advanced import settings.

    • Group Search Criteria. Search criteria to find LDAP groups. If not included, vRealize Operations uses the default search parameters: (|(objectClass=group)(objectClass=groupOfNames))
    • Member Attribute. Name of the attribute for a group object that contains the list of members. If not included, vRealize Operations uses member by default.
    • User Search Criteria. Search criteria to use the member field to find and cache LDAP users. You enter sets of key=value pairs in the form (|(key1=value1)(key2=value2)). If not included, vRealize Operations searches for each user separately. This operation might take extra time.
    • Member Match Field. Name of the attribute for a user object to match with the member entry from a group object. If not included, vRealize Operations treats the member entry as a distinguished name.
    • LDAP Context Attributes. Attributes that vRealize Operations applies to the LDAP context environment. You enter sets of key=value pairs separated by commas, such as java.naming.referral=ignore,java.naming.ldap.deleteRDNfalse.

    Group Name

    Displays the user groups found. Click the check box for each user group to import.

    Table 2. Import User Groups Page - Single Sign On Source
    Option Description

    Import From

    Host machine configured as the source to import the user groups.

    Domain Name

    User name of the source credential to import user groups to the vRealize Operations instance.

    Result Limit

    Determines the number of groups displayed.

    Search Prefix

    Enter a search prefix to narrow your search.

    Group Name

    Displays a list of user groups. Select the Group Name check box to import all the displayed user groups, or select the check box next to each user group that you want to import.

    Table 3. Import User Groups from a VMware Identity Manager Source
    User Details Options Description

    Import From

    VMware Identity Manager configured as the source to import user groups.

    • Add icon. Add an VMware Identity Manager import source, and provide the information for the VMware Identity Manager import source in the Add Source for User and Group Import dialog box.
    • Edit icon. Edit the selected VMware Identity Manager import source, and modify the details in the Edit Source for User and Group Import dialog box.

    Domain Name

    Enter the domain name for import.

    Search Prefix

    Enter a search string, and click Search to start the search for user groups.

    User Name Summary grid

    Lists the users available for import. Select the check box for each user group to import, or select the Group Name check box to import all groups. User groups that are already imported to vRealize Operations do not appear in the list.

  3. After you enter the import user group details, click Next.
    Table 4. Import User Groups - Roles and Objects Page
    Option Description

    Select Role

    		Displays available roles in a drop-down menu.

    Assign this role to the group

    Roles determine which actions users of the group can perform in the system. Select a role from the Select Role drop-down menu, and then select the Assign this role to the user check box. You can associate more than one role with the user group.

    Select Object Hierarchies

    Select which objects the users of the group can access when assigned this role.

    • Select Object Hierarchies: Displays groups of objects. Select an object in this list to select all the objects in the hierarchy,
    • Select Object: To select specific objects within the object hierarchy, click the down arrow to expand the list of objects. For example, expand the Adapter Instance hierarchy, and select one or more adapters.
    • Allow access to all objects in the system: Select this check box to permit users of the group access to all objects in the system.