Cannot find privilege.vrmpolicy.label in role configuration in vSphere Client

Products

• VMware vCenter Server

Issue/Introduction

• You are trying to configure a custom role for an external application in vSphere Client
• one of the requirements given was to include the privileges in the "VRMPolicy" category in the role
• however, no such category can be found in the "Edit Role" dialog
• in some cases a category "privilege VRCMPolicy.label" exists instead, containing some VRMPolicy privileges, which are also named as .label
• The vCenter server was originally deployed as vCenter Server 6.x or an older version and was upgraded to VC 7.0.x since

 

 

 

 

Environment

VMware vCenter Server 7.0.x

Cause

The role model in vCenter Server versions up until 6.5 did include VRMPolicy privileges natively for use by vSphere Replication.

Current vSphere Replication versions compatible with vSphere 7.0.x and later do no longer require these privileges, hence with vSphere 6.7 those privileges have been disabled.  

Resolution

The VRMPolicy privilege category has been removed since vCenter Server 6.7. In some situations (e.g. when the vCenter was upgrade from 6.5 in the past) there might still be leftovers like the aforementioned "privilege VRCMPolicy.label". This category might even still contain 2 privileges:

• privilege.VRMPolicy.Query.label
• privilege.VRMPolicy.Update.label

However, these are no longer functioning.

If a 3rd party application requires these permissions to function, please work with the application vendor to evaluate if the application has been certified as compatible with vSphere 7.0.x (or 8.0.x). If the vendor confirms the compatibility, the application needs to be able to function without requiring these privileges, in which case please work with the vendor to assign the correct permissions instead.