Access Control: User Accounts Tab

You can add, edit, or remove vRealize Operations user accounts, and import user accounts from an external LDAP database. With access control, you manage roles, the objects a user can access while assigned a specific role, and the membership in user groups.

Where You Manage User Accounts

From the left menu, click Administration, and then click the Access Control tile.

Table 1. Access Control User Accounts Summary Grid

Summary Grid Options	Description
User Accounts toolbar	To manage user accounts, use the toolbar icons. Click the Add icon to add a user account, and provide the details for the user account in the Add User Account dialog box. Click the Vertical Ellipses to perform any one of the following actions: Edit. Edit the selected user account, and modify the details for the user group in the Edit User Account dialog box. Delete. Delete a user account. Export. Click Export User Accounts to export a user account, and provide the details to export the user account in the Export Authentication Source dialog box. Click the Horizontal Ellipses and select Delete. Delete a user account. Export. Click export to export a user account, and provide the details to export the user account in the Export Authentication Source dialog box. Click Import to import a user account, and provide the details to import the user account in the Import User Accounts dialog box. Click Import from source to import a user account, and provide the details to import the user group in the Import User dialog box.
First Name	User's first name, created when you create the user account.
Last Name	User's last name, created when you create the user account.
User Name	User name, without spaces, that will log in to vRealize Operations
Email	User's email address, created when you create the user account.
Description	Description of the user account, defined when you create the user account. This information can identify the type of user and a summary of their access privileges.
Imported	Indicates whether the user account is imported or not.
Source Type	Indicates whether the user account is a local user, or an external user who is integrated through an external authentication source, such as from LDAP, SSO, AD, OpenLDAP, vCenter Server.
Enabled	Indicates whether the user account is enabled to use vRealize Operations features. An administrator can edit a user account to manually enable it, or disable it to prevent user access to vRealize Operations.
Locked	Indicates whether vRealize Operations has locked the user account. For example, a user account can get locked based on the password lockout policy, or if the user enters an incorrect password three times in the span of five minutes.
Access All Objects	Indicates whether the user account is allowed to access all the objects that are imported into the vRealize Operations instance.
Modified By	Indicates the last person to update the user account.
Last Modified	Indicates the last time the user account was updated.
Last Login Time	Indicates the last time the user logged in.

After you add a user account, use the Details grid to view and edit which user accounts are assigned to user groups, and view the permissions assigned to the user account.

Table 2. Access Control User Accounts Details Grid

Details Grid Options	Description
User Groups	Assigned user groups appear when you click a user in the summary grid. You can then view and modify which user groups the user is associated with. User Name: Identifies the user account. To change the user groups associated with the user account, click the Edit icon. The Choose Groups Membership dialog box opens. Click the All tab to view all the available groups. Click the Selected tab to view the groups that the user account is part of. Click the Unselected tab to view the groups that the user account is not a part of. Use the Search field to search for specific groups. Members: Displays the number of users that are assigned to the user group.
Permissions	Permissions appear when you click a user in the summary grid, and click the Permissions tab in the Details grid. You can then view the roles assigned to the user, and object hierarchy details. Role: Indicates the name of the role or roles assigned to the user. Role Description: Displays the description entered for the role. Object Hierarchy: Displays the name of the object hierarchy assigned to the user while holding this role. Objects: Displays the number of objects included in the hierarchy that the user can access. Association: Indicates if the role and objects are assigned to the selected user, or assigned to a user group to which the user belongs.