I am currently using vCenter 6.0 Update 3 with 6.0 U3 nodes. I have Windows AD Auth on my vCenter and have the ESXi hosts all domain joined with an AD ESXi admin group defined in Config.HostAgent.
This works great for my admin access for myself and other users on my team. However, I am trying to figure out the easiest way to create RO users for monitoring tools to logon and monitor the environment without having to use the root account. I can create individual local users on each host but that seems to be a lengthy process with a lot of hosts. Can you also define a RO user on the ESXi hosts that is an AD user or is that not possible?