SSO Domain Predefined Groups

Question 1

Users:

Answer 1

This group contains all users in the SSO domain.

Question 2

DCAdmins:

Answer 2

Members of this group can perform domain controller administrator actions on VMware Directory Service.

Question 3

SolutionUsers:

Answer 3

Each solution user authenticates individually to vCenter Single Sign-On with a certificate. By default, VMCA provisions solution users with certificates. Do not add members to this group explicitly.

Question 4

CAAdmins:

Answer 4

Members have administrator privileges for VMCA. Adding members to these groups is not usually recommended, but a user must be a member of this group to perform most certificate management operations, such as using the certool command.

Question 5

SystemConfiguration.BashShellAdministrators:

Answer 5

Members can enable and disable access to the BASH Shell.

Question 6

SystemConfiguration.Administrators:

Answer 6

Members can view and manage the system configuration and perform tasks such as restarting services.

Question 7

LicenseSevice.Administrators:

Answer 7

Members have full write access to all licensing-related data and can add, remove, assign, and un-assign serial keys for all product assets registered in licensing service.

Question 8

Administrators:

Answer 8

Members can perform SSO administration tasks for VMware Directory Service (vmdir).