Enterprise security standards often restrict the use of default administrative credentials, such as [email protected], due to auditing, accountability, and least-privilege enforcement policies. When preparing for a VxRail deployment with an external, customer-managed vCenter, it is not mandatory to utilize the unrestricted default administrator account. To eliminate security vulnerabilities while facilitating proper cluster initialization, the customer should create a custom role within vCenter configured with limited permissions, then provision a dedicated user account and assign it to this new role.
Dell specifies a precise, restricted matrix of privileges required by the VxRail Manager service account to manage host attachment, storage provisioning, network alignment, and lifecycle updates. By building a custom role that contains only these mandatory minimum privileges and binding it to a newly created non- default service user, the organization enforces a secure operational boundary. Modifying the permissions of the default [email protected] account or providing full administrative scope to a new user fails to satisfy least-privilege security requirements and can inadvertently destabilize global vCenter management operations.
References: Dell VxRail Deploy Study Guide; vCenter Server Choice and Planning; Security Roles and Privileges Configuration.