This section provides information about creating and managing roles.

If you use LDAP or Active Directory for user authorization, vCenter Hypericcan automatically assign users to vCenter Hyperic roles whose name matches a group to which the user is assigned - if the role names and LDAP group names adhere to a required naming convention. To take advantage of this functionality:

a role name in vCenter Hyperic must match a group name in your authorization directory. In addition to being identical, both role name and group name must be prefixed by org\, for example org\Admin.

vCenter Hyperic server must be configured to use your LDAP system.