Create a group named VMware Aria Automation IaaS administrator group.
Create a user named VMware Aria Automation IaaS administrator user and add
the user to the group created in the previous step. If you
set up vCenter to use Active Directory and want
to use a user from your identity source, add the user to the group.
Create a role named VMware Aria Automation IaaS administrator role
with the set of permissions that are listed in the following table.
Apply the VMware Aria Automation IaaS administrator role to the
VMware Aria Automation IaaS administrator group at the vCenter level.
Attribute value
Permission
Datastore
Allocate space
Browse datastore
Datastore cluster
Configure a datastore cluster
Folder
Create folder
Delete folder
Global
Manage custom attributes
Set custom attribute
Network
Assign network
Permissions
Modify permissions
Resource
Assign VM to resource pool
Migrate powered off VM
Migrate powered on VM
VM inventory
Create from existing
Create new
Move
Remove
Virtual machine interaction
Configure CD media
Console interaction
Device connection
Power off
Power on
Reset
Suspend
Tools install
Virtual machine configuration
Add existing disk
Add new disk
Add or remove
Remove disk
Advanced
Change CPU count
Change resource
Extend virtual disk
Disk change tracking
Memory
Modify device settings
Rename
Set annotation (version 5.0 and later)
Settings
Swapfile placement
Provisioning
Customize
Clone template
Clone VM
Deploy template
Read customization specs
Virtual machine state
Create snapshot
Remove snapshot
Revert to snapshot
Install VMware Aria Automation in your on-premises environment
Deploy a vSphere Agent for the VMware Aria Automation endpoint.
Sign in to the VMware Aria Automation IaaS server appliance as
VMware Aria Automation IaaS administrator user.
Go to https://vra-url:5480/installer, where
vra-url is the URL that you use to access the
VMware Aria Automation administration UI.
Click IaaS Installer to download the installer. The naming convention
for the installer file is setup_vra-url@5480.exe.
Run the installer. On the Welcome screen, click Next.
Accept the EULA and click Next.
Provide the sign-in information, click Accept Certificate, and then
click Next.
Select Custom Install and Proxy Agents, and click Next.
Enter the IaaS server sign-in information and click Next. If you are
using Active Directory, enter the username in domain\user format.
Otherwise, use user@domain format.
For the proxy settings, enter vSphere for Agent type. Enter a name
for the agent.
Enter the IaaS server FQDN in the Manager Service Host and the Model
Manager Web Service Host fields.
Click Test to test the connection for each of the FQDN values. If the
test fails, modify your DNS settings so that the IaaS server hostname is
resolved.
Enter a name for the vCenter server endpoint for the private cloud. Record
the name for use later in the configuration process.
Click Next.
Click Install.
Configure the vSphere agent
Go to https://vra-url/vcac and sign in as ConfigurationAdmin.
Select Infrastructure > Endpoints >
Endpoints.
Select New > Virtual > vSphere.
Enter the vSphere endpoint name that you specified in the previous procedure.
For Address, enter the private cloud vCenter Server URL in the format
https://vcenter-fqdn/sdk, where vcenter-fqdn is the name of the vCenter
server.
Enter the credentials for the VMware Aria Automation IaaS administrator user
that Cloud Customer Care created for you.
Click Test Connection to validate the user credentials. If the test
fails, verify the URL, account information, and endpoint name and test again.
After a successful test, click OK to create the vSphere endpoint.
Verify the endpoint name
To identify the correct vCenter server endpoint name, do the following:
Open a command prompt on the IaaS appliance.
Change the directory to
C:\Program Files (x86)\VMware\vCAC\Agents<var>AGENT_NAME,
replacing AGENT_NAME with the name you assigned to
the vCenter server endpoint.
Run the following command.
..\..\Server\DynamicOps.Vrm.VRMencrypt.exe VRMAgent.exe.config get
The output is similar to the following. The value of the
managementEndpointName field is the endpoint name.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Configuring VMware Aria Automation\n==================================\n\nYou can set up VMware vCenter Server on your Google Cloud VMware Engine private cloud\nas an endpoint for VMware Aria Automation.\n\nBefore you begin\n----------------\n\nComplete the following tasks before configuring vCenter Server:\n\n- Set up [private services access](/vmware-engine/docs/networking/howto-setup-private-service-access) for connectivity between your on-premises environment and your private cloud.\n- [Configure DNS forwarding of on-premises DNS requests](/vmware-engine/docs/networking/howto-dns-on-premises) to the DNS servers for your private cloud.\n- [Elevate your vCenter privileges](/vmware-engine/docs/private-clouds/howto-elevate-privilege) from VMware Engine portal.\n - Create a group named `VMware Aria Automation IaaS administrator group`.\n - Create a user named `VMware Aria Automation IaaS administrator user` and add the user to the group created in the previous step. If you [set up vCenter to use Active Directory](/vmware-engine/docs/vmware-platform/howto-identity-sources) and want to use a user from your identity source, add the user to the group.\n - Create a role named `VMware Aria Automation IaaS administrator role` with the set of permissions that are listed in the following table.\n - Apply the `VMware Aria Automation IaaS administrator role` to the `VMware Aria Automation IaaS administrator group` at the vCenter level.\n\nInstall VMware Aria Automation in your on-premises environment\n--------------------------------------------------------------\n\nDeploy a vSphere Agent for the VMware Aria Automation endpoint.\n\n1. Sign in to the VMware Aria Automation IaaS server appliance as `VMware Aria Automation IaaS administrator user`.\n2. Go to `https://`\u003cvar translate=\"no\"\u003evra-url\u003c/var\u003e`:5480/installer`, where \u003cvar translate=\"no\"\u003evra-url\u003c/var\u003e is the URL that you use to access the VMware Aria Automation administration UI.\n3. Click **IaaS Installer** to download the installer. The naming convention for the installer file is `setup_vra-url@5480.exe`.\n4. Run the installer. On the **Welcome** screen, click **Next**.\n5. Accept the EULA and click **Next**.\n6. Provide the sign-in information, click **Accept Certificate** , and then click **Next**.\n7. Select **Custom Install** and **Proxy Agents** , and click **Next**.\n8. Enter the IaaS server sign-in information and click **Next** . If you are using Active Directory, enter the username in **domain\\\\user** format. Otherwise, use **user@domain** format.\n9. For the proxy settings, enter **vSphere** for **Agent type**. Enter a name for the agent.\n10. Enter the IaaS server FQDN in the **Manager Service Host** and the **Model\n Manager Web Service Host** fields.\n11. Click **Test** to test the connection for each of the FQDN values. If the test fails, modify your DNS settings so that the IaaS server hostname is resolved.\n12. Enter a name for the vCenter server endpoint for the private cloud. Record the name for use later in the configuration process.\n13. Click **Next**.\n14. Click **Install**.\n\nConfigure the vSphere agent\n---------------------------\n\n1. Go to `https://vra-url/vcac` and sign in as **ConfigurationAdmin**.\n2. Select **Infrastructure \\\u003e Endpoints \\\u003e\n Endpoints**.\n3. Select **New \\\u003e Virtual \\\u003e vSphere**.\n4. Enter the vSphere endpoint name that you specified in the previous procedure.\n5. For **Address** , enter the private cloud vCenter Server URL in the format `https://vcenter-fqdn/sdk`, where `vcenter-fqdn` is the name of the vCenter server.\n6. Enter the credentials for the VMware Aria Automation IaaS administrator user that Cloud Customer Care created for you.\n7. Click **Test Connection** to validate the user credentials. If the test fails, verify the URL, account information, and endpoint name and test again.\n8. After a successful test, click **OK** to create the vSphere endpoint.\n\n### Verify the endpoint name\n\nTo identify the correct vCenter server endpoint name, do the following:\n\n1. Open a command prompt on the IaaS appliance.\n2. Change the directory to `C:\\Program Files (x86)\\VMware\\vCAC\\Agents\u003cvar\u003eAGENT_NAME`, replacing \u003cvar translate=\"no\"\u003eAGENT_NAME\u003c/var\u003e with the name you assigned to the vCenter server endpoint.\n3. Run the following command.\n\n ..\\..\\Server\\DynamicOps.Vrm.VRMencrypt.exe VRMAgent.exe.config get\n\nThe output is similar to the following. The value of the\n`managementEndpointName` field is the endpoint name.\n\n`managementEndpointName: cslab1pc3-vc`\n\n\n`doDeletes: true`\n\nWhat's next\n-----------\n\n- Learn about [elevating privileges](/vmware-engine/docs/private-clouds/howto-elevate-privilege) on your private cloud.\n- [Contact Cloud Customer Care](/vmware-engine/docs/support) to create a VMware Aria Automation IaaS administrator user."]]
