Support for Principal Identities Authentication for the NSX-T Management Pack

vRealize Operations supports authentication of Principal Identities (PI) using the NSX-T Management Pack. The Principal Identities (PI) are unique users in NSX-T who can create an object and ensure that the object can only be modified or deleted by the same identity. The authentication of principal identities is only supported through client certificate. The principal identities authentication is local to NSX-T Manager, so it does not require VMware Identity Manager, and it is possible to assign a predefined Role-based access control (RBAC) role to the principal identity.

Principal Identities are generally used by third-party applications or cloud management platforms such as Open stack, and Pivotal Container Services (PKS) to ensure that an administrator does not modify the NSX-T configuration which can generate a mismatch between their view of the NSX environment and the actual configuration.