Granting access to NSX
User account management in the vSphere web client is separate from CLI user account management in any NSX components. In this recipe, we will grant several users access to the NSX plugin in the vSphere web client with the following requirements:
- Greg as an Enterprise Administrator in NSX
- Susan as a Security Administrator in NSX
- Carla as an NSX Administrator in NSX
These users should not be given access to perform administration tasks against vSphere objects; they should only have read-only access to vSphere constructs. These users are available in the Active Directory domain integrated with SSO; in this example, the domain name is CORP.LOCAL. They do not have any access to the vSphere web client or NSX at the moment.
Getting ready
The users that will be granted access to NSX will need to be given access to the vCenter vSphere web client by a vSphere admin first; the minimum required access is a read-only role. Once the users have access to the vSphere web client, they can...
