Unable to establish connection with VMware-NSX when not using Admin user

Products

• Data Center Security Server

Issue/Introduction

Unable to register Vcenter/NSX pair when not using local NSX “Admin” user.

ERRORCODE: UMC_6007
ERRORMSG: "The specified user does not have the Enterprise Administrator role that is required to configure the NSX settings."
ERRORREMEDY: "Provide credentials of a user who is assigned the Enterprise Administrator role that is required to configure the NSX settings."

 

Cause

Integration of NSX with Single Sign On :

https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-523B0D77-AAB9-4535-B326-1716967EC0D2.html

 

Resolution

As per vmWare developer central, user for performing DCS:S -> NSX/vCenter registration, should always be a local vmWare user with all admin rights instead of SSO / non - local Admin. As vmWare's exposed APIs only authenticate to local admins. Also as per vmWare there are no APIs which would work with non-local/SSO admin user.
​
If customer uses non-local / SSO Admin then registration is bound to fail also, other NSX related features like 'Sync With NSX' may also not work.

This is a limitation from vmWare side API implementation