Permissions for multi-tenant Certificate Management and Identity Provider

Products

• VMware vCenter Server

Issue/Introduction

Administrator role was cloned to manage Certificate Management and Identity Provider. However, the roles are inaccessible. 

Cause

In order to manage SSO objects, such as the identity source or any other SSO configuration, the user must be a member of that 'administrators' group under the SSO domain. 

Resolution

Apply the account that requires the permissions to the Administrators group.