APJ7033
Enthusiast
Enthusiast
‎08-14-2019 01:03 PM

VRO 7.6 authentication provider

Hi

when standing up a new instance of VRO, one has to add the appropriate authentication provider. In my case it is  vsphere. The part I am confused about is, what purpose does the admin group serve. I have tried the following

Created a group called VCOAdmin in the vsphere.local domain.
Added an active directory group to the group
Made VCOAdmin the admin group for the authentication provider

When I test, my AD user that is part of VCOAdmin group test succesfully as having admin access to VRO

When I log out of the control center and try log in with my AD user the log in fails, I can however log into the VRO client HTML5 and Java.

I am also not able to execute API calls with this account.

What am I missing ?

Reply
iiliev
VMware Employee
VMware Employee
‎08-14-2019 01:43 PM

Hi,

To login in vRO Control Center, you have to use root account, not an account from the configured admin group.

Reply
APJ7033
Enthusiast
Enthusiast
‎08-14-2019 02:15 PM

Ok, so what is the function of the admin group you have yo configure in the authentication provider wizard ?

Reply
0 Kudos
iiliev
VMware Employee
VMware Employee
‎08-14-2019 02:34 PM

Members of the admin group will have administrator privileges in vRO. That is, they will have full access to vRO features / content, and will be able to set permissions that control access to features / content for other users / groups.

---------------------------------------------------------------------------------------------------------

Was it helpful? Let us know by completing this short survey here.

View solution in original post

Reply