Login to Aria Operations for Logs (formerly vRLI) using Active Directory is not working and Configure tab feature and most options under Management in the UI are not present

Products

• VMware Aria Suite

Issue/Introduction

• Below events can be seen in /storage/var/loginsight/ui.log indicating that the user account had RBAC access:

[2023-05-08 12:10:51.435+0000] ["https-openssl-apr-443-exec-4"/x.x.x.x INFO] [com.vmware.loginsight.web.actions.InstrumentationActionBean] [[ClusterID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx] [LI Version: 8.8.0] [UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/x.x.x.x Safari/537.36] [UserID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx] [RBAC Capabilities: EDIT_SHARED_DASHBOARDS,VIEW_SHARED_DASHBOARDS,VIEW_INTERACTIVE_ANALYTICS,EDIT_USER_DASHBOARDS,VIEW_CONTENT_PACKS,VIEW_SHARED_DASHBOARD_URLS,EDIT_INTERACTIVE_ANALYTICS,EDIT_SHARED_DASHBOARD_URLS,EDIT_EXPORT,VIEW_USER_DASHBOARDS,VIEW_EXPORT,EDIT_EXTRACTED_FIELDS,VIEW_ALERTS,EDIT_CONTENT_PACKS,VIEW_EXTRACTED_FIELDS,VIEW_CONTENT_PACK_DASHBOARDS] [RBAC Group: User] {"name":"FacetLinkExpanded","where":"ia.field_box.plus_icon","value":"xxxxxxxxxxxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000"}]

[2023-05-15 07:44:44.243+0000] ["https-openssl-apr-443-exec-6"/xx.xx.xxx.xx INFO] [com.vmware.loginsight.web.actions.InstrumentationActionBean] [[ClusterID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx] [Operations for Logs Version: 8.12.0] [UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36] [UserID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx] [RBAC Capabilities: EDIT_SHARED_DASHBOARDS,VIEW_SHARED_DASHBOARDS,VIEW_INTERACTIVE_ANALYTICS,EDIT_USER_DASHBOARDS,VIEW_CONTENT_PACKS,VIEW_SHARED_DASHBOARD_URLS,EDIT_INTERACTIVE_ANALYTICS,EDIT_SHARED_DASHBOARD_URLS,EDIT_EXPORT,VIEW_USER_DASHBOARDS,VIEW_EXPORT,VIEW_SCHEDULED_REPORTS,EDIT_EXTRACTED_FIELDS,VIEW_ALERTS,EDIT_CONTENT_PACKS,EDIT_SCHEDULED_REPORTS,VIEW_EXTRACTED_FIELDS,VIEW_CONTENT_PACK_DASHBOARDS] [RBAC Group: User] PageLoaded: Explore Logs | Operations for Logs (page load: 23070ms)]

[2023-05-15 07:44:59.318+0000] ["https-openssl-apr-443-exec-9"/xx.xx.xxx.xx INFO] [com.vmware.loginsight.web.actions.InstrumentationActionBean] [[ClusterID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx] [Operations for Logs Version: 8.12.0] [UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36] [UserID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx] [RBAC Capabilities: EDIT_SHARED_DASHBOARDS,VIEW_SHARED_DASHBOARDS,VIEW_INTERACTIVE_ANALYTICS,EDIT_USER_DASHBOARDS,VIEW_CONTENT_PACKS,VIEW_SHARED_DASHBOARD_URLS,EDIT_INTERACTIVE_ANALYTICS,EDIT_SHARED_DASHBOARD_URLS,EDIT_EXPORT,VIEW_USER_DASHBOARDS,VIEW_EXPORT,VIEW_SCHEDULED_REPORTS,EDIT_EXTRACTED_FIELDS,VIEW_ALERTS,EDIT_CONTENT_PACKS,EDIT_SCHEDULED_REPORTS,VIEW_EXTRACTED_FIELDS,VIEW_CONTENT_PACK_DASHBOARDS] [RBAC Group: User] PageLoaded: Dashboards | Operations for Logs (page load: 2491ms)]

Environment

• Aria Operations for Logs 8.12.x
• Aria Operations for Logs 8.x

Cause

• The user account named 'admin' (UserId: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx) is not a Super Admin (only has User RBAC access)

Resolution

• Resolving this issue requires modifications to the database. We recommend creating a case with the Global Support team and referencing this KB article for detailed guidance and further assistance.