A user account that will be used for registering NSX manager to the vCenter server to query the vSphere infrastructure must have an administrator role in the vCenter. If the NSX manager is going to be integrated into SSO services provided by vSphere, the user must be an SSO administrator.
In this recipe, we will create a service account user called nsx-svc in the SSO domain (vsphere.local) that will be used to register NSX manager to the vCenter server and SSO services.