Creating a Fabric Group and Assigning a Compute Resource - Part 4

Now we have our tenant created, identity source assigned and roles assigned we can now create a fabric group to assign access to the underlying computer resources.

1. The first step is to change the context of which we are connecting to the vRealize Automation system, this involves connecting to our newly created tenant instead of the system. Enter the following command-line syntax to authenticate to the tenant and the IaaS system.



In this example we used the 'vra login userpass' command. For easy reference here are the parameters explained. Notice in the example above we are specifying the same credentials for both the tenant and the IaaS Service, this is because we assigned both the 'Tenant Admin' and Infrastructure Admin' roles to the account in my previous post.

 

 2. Now we are authenticated we can create the fabric group, enter the following command-line syntax:


In this example we used the 'vra fabricgroup add' command. For easy reference here are the parameters explained. Notice when you issue the command a hexadecimal value is returned, make a note of this value as we will need it later.



3. The previous step created the fabric group, but in order to allocate compute resources we need to perform a second step to tie the fabric group and compute resource together. For this we need to establish the unique identifier or Id for the compute resource. Enter the following command-line syntax to list all compute resources and make a note of the Id associated with the compute resource you want to assign.

 

4. Finally we need to issue an update command to the fabric group to link the compute resource, for this process we need to supply the Id of the fabric group (the hexadecimal value displayed on completion of step 2) and the Id of the compute resource from the table in step 3. For the purpose of this we are going to assign the compute resource Id associated with the Payload-01 friendly name which relates to my vSphere Cluster. Enter the following command-line syntax:

 
 
In this example we used the 'vra fabricgroup update' command. For easy reference here are the parameters explained.



Once complete this is what it look likes inside the vRealize Automation UI.

Adding an Identity Store and Assigning Access to a Tenant - Part 3

In my previous post, I covered the creation of a tenant using the CloudClient but before you can authenticate to the tenant you need to first assign the Identity Store that you want to use for assigning access rights, then you need to assign access for the two tenant roles 'Tenant Admin' and  'Infrastructure Admin'.
 

Adding an Identity Store

1. Launch the CloudClient and authenticate to the vRealize Automation system. (Refer to my previous article here).

2. Enter the following command-line syntax to add an Identity Store to a tenant.

 

In this example we used the 'vra tenant identitystore add' command. For easy reference here are the parameters explained.

Assigning access to a Tenant

 3. Enter the following command-line syntax to assign access to the 'Tenant Admin' role of a tenant.



4. Enter the following command-line syntax to assign access to the 'Infrastructure Admin' role of a tenant.

 

In this example we used the 'vra tenant admin update' command. For easy reference here are the parameters explained.

 

NOTE: With the release of v3.x of CloudClient some of the old command-line syntax associated with the 'vra tenant admin update' command have been deprecated. See the official documentation for further details.