Aria Operations offers many options to integrate authentication sources, a list of them and details can be found in the following doc; Aria Operations – Authentication Sources.
My lab has Aria Operations 8.18 deployed and managed under Aria LCM appliance. I also have a cert provided from an internal AD CA (Active Directory Certificate Authority)
From the Aria Operations homepage go to ‘Administration’ >> ‘Control Panel’ and select ‘Authentication Sources’ From there click ‘Add’ and a configuration box will appear.

The settings below are default, for this configuration, I will not enable SSL/TLS right away.

If you happen to check SSL/TLS, you may receive the following error message if there is no certificate from your CA.

You can see it added the AD source, this will work, you can synchronize users and start importing them, but I want to update the source to make it use SSL

First, I will want to obtain my CA’s certificate chain and then import it into Aria Operations. This will download a *p7b cert for me, you can use CA to export to *.cer and rename the file to *.pem.

Back into Aria Operations, go to Administration >> Control Panel >> Trusted Certificates >> Click ‘Import’ The Windows browser will default to *.PEM and the file should appear, also not that Aria Operations will also take the *.p7b. You also have the option to click ‘Preview’ to review the cert.

Once the cert is imported, we can go back into ‘Authentication Sources’, Edit our ‘Athens AD’ source and enable SS/TLS option, input password again for the account used and click OK

You can go to the vertical ellipses to the left of the source and ‘Synchronize User Groups’ **This is completely optional** Just wanted to share the feature.

From here you can now structure RBAC under Administration >> Control Panel >> ‘Access Control’.
I refer you to additional VMware documentation on Aria Operations on working with Roles and Scopes.