"Access to resource is forbidden" error when adding a right to a role in Cloud Director 9.5 or higher.

Products

• VMware Cloud Director

Issue/Introduction

Symptoms:

• When adding a right to a role we receive the following error:

'Access to resource is forbidden'

• This is observed after upgrading Cloud Director from version 9.1 or earlier to Cloud Director version 9.5 or later.

Environment

VMware Cloud Director for Service Provider 9.5.x
VMware Cloud Director for Service Provider 9.x

Cause

• After you upgrade Cloud Director from version 9.1 or earlier, in addition to the System Rights Bundle, the system contains a Legacy Rights Bundle for each existing organization.
• Each Legacy Rights Bundle includes the rights that are available in the associated organization at the time of the upgrade and is published only to this organization.
• To begin using the rights bundles model for an existing organization, you must delete the corresponding Legacy Rights Bundle.

Resolution

• In the HTML5 UI, navigate to Administration > Rights Bundles.
• Delete any rights bundle with Legacy in their naming convention.

Additional Information

• For more information on the new Role Based Access Control (RBAC) model introduced in vCloud Director 9.5, please refer to the following link:

https://docs.vmware.com/en/vCloud-Director/9.5/com.vmware.vcloud.spportal.doc/GUID-816FBBBC-2CDA-4B1D-9B1A-C22BC31B46F2.html