vCloud Application Director grants local users, LDAP users, and LDAP groups specific roles for their functions.

You can group together local users, LDAP users, and LDAP groups to isolate applications, deployments, and deployment environments per group.

vCloud Application Director also supports an authentication mechanism through vCloud Automation Center. All of the users in the identity stores (IDP) configured in vCloud Automation Center for the tenant registered with vCloud Application Director, can log in with SSO credentials.