The Distributed Resource Scheduler (DRS) allows vSphere Administrators to use rules to enforce virtual machine placement on cluster nodes. An example of such a rule is in the image below with a rule to reparate two domain controllers so that they won't run on the same vSphere host.

vRealize Orchestrator allows you to configure permissions for users in your authentication domain to access your vRO deployment with different types of access. While you might want administrators to access your workflows from the vSphere Web Client sometimes there will still be users that need access with the vRO client. One example is a group of developers that you only want to allow access to one or just a few folders in your vRO environment.