Tenant roles have responsibilities that are limited to a specific tenant, and cannot affect other tenants in the system.

Tenant Administrator

Typically a line-of-business administrator, business manager, or IT administrator who is responsible for a tenant. Tenant administrators configure vCloud Automation Center for the needs of their organizations. They are responsible for user and group management, tenant branding and notifications, and business policies such as approvals and entitlements. They also track resource usage by all users within the tenant and initiate reclamation requests for virtual machines.

Service Architect

Umbrella term for the individuals who are responsible for creating the blueprints for the catalog items that consumers can request from the service catalog. This role is typically someone in the IT department, such as an architect or analyst.

In Infrastructure as a Service, tenant administrators and business group managers can create machine blueprints and multi-machine blueprints. In Application Director, application architects can create application blueprints and deployment profiles. In the Advanced Services Designer, service architects can create service blueprints.

Business Group Manager

Manages one or more business groups. Typically a line manager or project manager. Business group managers manage catalog items and entitlements for their groups in the service catalog. They can request and manage items on behalf of users in their groups. They are also service architects in Infrastructure as a Service.

Support User

A role in a business group. Support users can request and manage catalog items on behalf of other members of their groups. This role is typically an executive administrator or department administrator.

Business User

Any user in the system can be a consumer of IT services. Users can request catalog items from the service catalog and manage their provisioned resources.

Approval Administrator

Defines approval policies. These policies can be applied to catalog requests through entitlements that a tenant administrator or business group manager manage.


Any user of vCloud Automation Center, for example, a line manager, finance manager, or project manager, can be designated as an approver as part of an approval policy.