VMware VSAN: Scan Requirements

[ Applies to ] StorageGuard 9.x and later   /   VMware vSAN   /   VMware vCenter

StorageGuard collects VMware vSAN configuration data by connecting to VMware vCenter and running read-only vSphere (VI) API calls over HTTPS. This article describes the requirements and how to create the scan account.

Requirements

Create a scan account

Use one of the following suggested methods.

Option 1: Local user account

1. Log in to the vCenter appliance shell as a user with the super administrator role.

2. Create a local user with the Operator role. Replace <username> with the user name:

   localaccounts.user.add --role operator --username <username> --password

3. When prompted, enter and confirm the password for the new user.

Option 2: AD / LDAP user account

1. Log in to the vSphere Client as a user with the super administrator role.
2. Assign the AD / LDAP user the Read Only role.