You can configure the Orchestrator server to deny access to the Orchestrator client to all users who are not members of the Orchestrator administrator group.
By default, all users who are granted execute permissions can connect to the Orchestrator client. However, you can limit access to the Orchestrator client to Orchestrator administrators by setting a system property in the vmo.properties Orchestrator configuration file.
Important
If the vmo.properties configuration file does not contain this property, or if the property is set to false, Orchestrator permits access to the Orchestrator client by all users.
Procedure
1 | Navigate to the following folder on the Orchestrator server system.
|
|
|---|
|
If you installed Orchestrator with the vCenter Server installer
|
Go to install_directory\VMware\Infrastructure\Orchestrator\app-server\server\vmo\conf.
|
|
If you installed the standalone version of Orchestrator
|
Go to install_directory\VMware\Orchestrator\app-server\server\vmo\conf.
|
|
2 | Open the vmo.properties configuration file in a text editor. |
3 | Add the following line to the vmo.properties configuration file. #Disable Orchestrator client connection
com.vmware.o11n.smart-client-disabled = true
|
4 | Save the vmo.properties file. |
5 | Restart the Orchestrator server. |
You disabled access to the Orchestrator client to all users other than members of the Orchestrator administrator group.