"Privilege check failed for user VSPHERE.LOCAL\vmware-vsm-... for missing permission Sessions.TerminateSession" events in vCenter Server following upgrade to 8.0U2

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• Following upgrade of vCenter Server to 8.0U2 you observe warnings similar to the following in the vSphere Client Monitor > Events tab:

Privilege check failed for user VSPHERE.LOCAL\vmware-vsm-##########-###########-#########-########## for missing permission Sessions.TerminateSession. Session user performing the check: VSPHERE.LOCAL\vmware-vsm-##########-###########-#########-##########

• Checking the VsmSvcRole role which this solution user account is assigned, by navigating to Administration > Roles > VsmSvcRole > Privileges shows the following default privileges are present:

Extension > Update extension
vApp > vApp application configuration

Environment

VMware vCenter Server 8.0.2

Cause

This warning occurs because the default VsmSvcRole does not have the required "Sessions.TerminateSession" privilege.

Resolution

This issue is resolved in vCenter Server 8.0 Update 2b

Workaround:

1. Log in to the vSphere Client with a user which has the Administrator role.
2. Select Administration > Roles
3. Select the VsmSvcRole and click EDIT
4. In the Edit Role pop-up window which opens select Sessions > View and stop sessions
5. Click SAVE and confirm that the Privileges now appears like the sample screenshot below

Note: There are no service restarts required to implement this workaround.