Home > Blogs > VMware Support Insider


Determining which users are available to log into vCenter Server

Question: When installing SSO in a multisite configuration, is there a way to find out which users have rights to log into vCenter? We do not have the install log files any longer and we need to know which users have been removed from the authorized users.

Answer: You can access the the following table in the vCenter database to determine which users are available to log into vCenter Server. You can then use this list to recreate  removed users on the affected vCenter Server.

Steps:

  1. Log in to the SQL Database using the SQL Management Studio.
  2. Select your vCenter Server Database.
  3. Select New Query and enter the following query:
    select * from dbo.vpx_access
  4. Click Execute
ID     PRINCIPAL                    ROLE_ID        ENTITY_ID      FLAG
1      Domain\Administrators             -1                1         3
101    Domain\user1                       5               48         1
701    Domain\user2                      -5               85         1
501    SYSTEM-DOMAIN\admin               -1                1         1
809    Domain\uesr3                      -2                1         1
602    Domain\user4                      -5               85         1
603    Domain\user5                      -5               85         1
604    Domain\user6                      -5               85         1
605    Domain\user7                      -1               85         1
606    SYSTEM-DOMAIN\admin               -2               85         1
804    Domain\testaduser                 -1              131         1
808    Domain\testaduser                 -2               85         1

Under the column PRINCIPAL, look for any users that do not currently have rights to log into vCenter. Disregard the other columns of data, you do not need that.

One thought on “Determining which users are available to log into vCenter Server

  1. dragon

    I must thank you for the efforts you’ve put in penning this website.
    I’m hoping to see the same high-grade content by you in the future as well.
    In fact, your creative writing abilities has motivated me to get my own site now ;)

Comments are closed.