"Assign virtual machine to resource pool" error when performing tasks through vSphere Web Client

Products

• VMware vCenter Server
• VMware vSphere ESXi

Issue/Introduction

Symptoms:
Create, Clone, Migrate virtual machine tasks performed through vSphere Web Client (NGC) fails with the error:

Resource > Assign virtual machine to resource pool

Environment

VMware vCenter Server 6.0.x
VMware vSphere ESXi 6.0

Cause

This issue occurs if the user is assigned Resource -Assign virtual machine to resource pool privilege and propagate is set to FALSE as the roles matching fails at all levels in the parent chain hierarchy (Cluster >Datacenter >Root).

Resolution

This issue is resolved in vCenter Server 6.0 Update 3, available at VMware Downloads.

To work around this issue if you do not want to upgrade:

1. Add Assign virtual machine to resource pool privilege on the parent resource pool (Resource Pool > Cluster > Datacenter > Root). (More information on the permissions for the role can be found at the following KB: https://kb.vmware.com/s/article/1027743)
2. Change the propagate to TRUE.

Note: When a folder level permission is set, it exposes the whole inventory in Host and Cluster view. While the information on inventory is visible, the user is still restricted to perform tasks for which permission are not defined.

Additional Information

通过 vSphere Web Client 执行任务失败，并显示“将虚拟机分配给资源池”错误
vSphere Web Client で実行した仮想マシンのタスクが次のエラーで失敗する：仮想マシンのリソース プールへの割り当て

Impact/Risks:

When a user is part of a multi-tenant environment and assigned permission for a specific folder in the Inventory, the resolution steps exposes the whole inventory in a read-only mode.