[VMC on AWS] Unable to publish DFW rules via NSX UI with an Active Directory User

Products

• VMware Cloud on AWS

Issue/Introduction

Symptoms:
Cannot publish DFW policy/rule changes on the NSX Manager UI when logged in as an Active Directory user. Performing the same task via a NSX local user works fine. 

Cause

Its a limitation in the current workflow of publishing DFW configuration changes with a user who is part of AD group.

Resolution

This is a known issue in M18 and is fixed in M19 and later releases.

Workaround:
Use default local user cloud_admin or the VMC UI (Networking & Security tab) to publish the DFW policy/rules.