AD or LDAP with vCD is not a requirement. You can create all local accounts in vCloud Director. The roles in vCD are independent of those in vCenter although the same AD acocunt(s) could reside in different roles in each. IMHO when VCD is in play we should restrict the access through vCenter only to folks that need to do host based functions like updates, adding datastore, etc. There should be almost no Virtual Machine functions allowed through vCenter as those are handled through vCD. Then utilize the roles in vCD to control those same users for org level functions.
Personally using AD just allows for the users to reside in one place as opposed to dealing with local accounts in multiple places. That way disabling an AD user locks them out of all systems for security purposes. Doing local accounts is very cumbersome if you ask me.
