Deployments fail while updating tags on NSX-T integration with 401 Unauthorized error

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:

• Deployments fail on updating tags with a 401 unauthorized error similar to:

Updating tags on virtual machine [VMName] on NSX-T policy endpoint.: FAILED with java.util.concurrent.CompletionException: com.vmware.vapi.std.errors.Unauthorized: Unauthorized (com.vmware.vapi.std.errors.unauthorized) => {messages = [], data = struct => {error_message=User is not authorized to perform this operation on the application. Please contact the system administrator to get access., httpStatus=FORBIDDEN, error_code=401, module_name=common-services}, errorType = UNAUTHORIZED}

• login to NSX directly with the configured service account user to test manually adding tags. If the add tag button is greyed out. Then the account is likely missing the required permissions.

Cause

The error can occur when the account specified for the NSX-T integration does not have sufficient permissions in NSX-T itself.

Resolution

To resolve the issue validate that the account specified has the NSX-T Enterprise Administrator role as per the Credentials required for working with cloud accounts section of the documentation.