I'm getting ready to deploy Orchestrator. I'm using per-session authentication. What are all the accounts / groups I need to create in Active Directory?
A service account in Active Directory for per-session authentication that has full permissions in vSphere
An "Orchestrator Admins" AD group that has full permissions in orchestrator
An "Orchestrator Operators" or "Orchestrator Users" group with varying lower levels of permissions in Orchestrator
What am I missing. Are there any other service accounts, AD groups, or AD accounts I need to think about creating?
Thanks!