Error : "Permission to perform this operation was denied" When attempting to deploy OVF

Products

• VMware vCenter Server

Issue/Introduction

• Deployment of the OVFs are failing from the vCenter with the error in the wizard with the follow error:
  
  "Provider method implementation threw unexpected exception. %s VapiStructureProxy.cause Permission to perform this operation was denied."
  
  
• The deployment is failing using both AD and SSO administrator user.
  
  
• No timeouts observed or stale entries under the cl_vcenter_task table.
  
  
• Date & time of the vCenter is proper
  
  
• Deployment ovf via host client and ovf tool works properly
  
  
• Export of VMs happen successfully
  
  
• In the vCenter - /varlog/vmware/content-library/cls.log the following errors are found:
  
  2020-07-02T09:14:04.695Z | ERROR    | SelectResourcePageMediator-validate-2531028-ngc:70089529-76-6f | cls-simple-activity-4     | IntermediateResultListener     | Activity threw exception.com.vmware.vapi.std.errors.Unauthorized: Unauthorized (com.vmware.vapi.std.errors.unauthorized) => {messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => {id = com.vmware.vapi.authorization.permission.denied, defaultMessage = Permission to perform this operation was denied., args = []


• In the vCenter - /var/log/vmare/vpxd/vpxd.log the following errors are found:
  
  2020-07-02T09:14:04.795Z info vpxd[7F6ACD62A700] [Originator@6876 sub=vpxLro opID=SelectResourcePageMediator-validate-2531028-ngc:70089529-76-6f-ee-e9-fc] [VpxLRO] -- FINISH lro-18828506
2020-07-02T09:14:04.795Z info vpxd[7F6ACD62A700] [Originator@6876 sub=Default opID=SelectResourcePageMediator-validate-2531028-ngc:70089529-76-6f-ee-e9-fc] [VpxLRO] -- ERROR lro-18828506 -- task-263772 -- vim.Task.setState: vim.fault.InvalidState:
--> Result:
--> (vim.fault.InvalidState) {
-->    faultCause = (vmodl.MethodFault) null,
-->    faultMessage = <unset>
-->    msg = ""
--> }
--> Args:
-->
--> Arg state:
--> "error"
--> Arg result:
-->
--> Arg fault:
--> (vim.fault.OvfImportFailed) {
-->    faultCause = (vmodl.fault.SecurityError) {
-->       faultCause = (vmodl.MethodFault) null,
-->       faultMessage = (vmodl.LocalizableMessage) [
-->          (vmodl.LocalizableMessage) {
-->             key = "com.vmware.vapi.authorization.permission.denied",
-->             arg = <unset>,
-->             message = "Permission to perform this operation was denied."
-->          }
-->       ]
-->       msg = "Permission to perform this operation was denied."
-->    },
-->    faultMessage = <unset>
-->    msg = ""
--> }

Environment

vCenter 7.0.x

Cause

A required solution user definition is missing under global permission. This is a hard requirement as content library is permission hierarchy is under global permissions.

Resolution

Fix the missing permission using the following steps:

1. Add the following solution users under global permission to address the issue:
   
   vpxd
vpxd-extension


An example of this process can be seen in the screenshot below:

Additional Information

UsingvCenter Server Global Permissions