This is a known issue affecting Cloud Director 10.x.
It is resolved in the 10.1.3 release of Cloud Director as outlined in the release notes, VMware Cloud Director 10.1.3 Release Notes.
Workaround:
To workaround the issue add the "Edit VM CPU and Memory Reservation / Limit / Shares in all VDC types" Right to the affected Organization and user Roles.
To assign the "Edit VM CPU and Memory Reservation / Limit / Shares in all VDC types" Right to an Organization we can use the Rights Bundle functionality outlined in the Cloud Director documentation here, Managing Rights Bundles.
Once the Right is available within the affected Organization we can add the "Edit VM CPU and Memory Reservation / Limit / Shares in all VDC types" Right to the user Roles to make it available to the users as per the Cloud Director documentation here, View and Edit a Global Tenant Role.
Example steps using the "Default Rights Bundle" to add the RIght to Organizations would be as follows:
- Log into the Cloud Director Provider UI as a System Administrator and navigate to Administration > Tenant Access Control > Rights Bundles.
- Edit the "Default Rights Bundle" to include the "Edit VM CPU and Memory Reservation / Limit / Shares in all VDC types" Right under the Compute > vApp section.
- Delete any "Legacy Rights Bundles" for the Organizations as these will stop the use of the "Default Rights Bundle" for those Organizations.
- Publish the "Default Rights Bundle" to all Tenants or a subset of Tenants as desired.
- Still within the Cloud Director Provider UI as a System Administrator navigate to Administration > Tenant Access Control > Global Roles.
- Edit Global Roles in use by affected Organization Users and add the "Edit VM CPU and Memory Reservation / Limit / Shares in all VDC types" Right.
- Publish these Global Roles to the affected Tenants.
- Confirm within the Organizations' Tenant UIs, under Administration > Access Control > Roles that the published Roles include the "Edit VM CPU and Memory Reservation / Limit / Shares in all VDC types" Right under the Compute > vApp section.
- Log in as Tenant users to the Cloud Director Tenant UIs for the affected Organizations and confirm that the correct limits are seen after deploying vApp VMs from vApp VM Templates.