Error: "Unable to login because you do not have permission on any vCenter Server systems connected to this client" when trying to login to vCenter Server with Active Directory user

Products

• VMware vCenter Server
• VMware vSphere ESXi

Issue/Introduction

• Login to vCenter Server fails.
• You see an error similar to:

Unable to login because you do not have permission on any vCenter Server systems connected to this client

Environment

VMware vCenter Server 7.0.x
VMware vCenter Server 8.0.x

Cause

This issue occurs due to the user account (Active Directory user or a Local User) does not have the appropriate permissions to log in to vCenter Server.

 

By default, the local administrators group on the vCenter Server is the only group that has access to the vCenter Server. If you try to log in as a user that is not a member of the administrators group (either directly or indirectly through another group), the log in fails because the user account has no permission to any object in the inventory.

 

Note: If vCenter Server is connected to your Active Directory domain, by default, the Domain Admin's group is a member of the Local Administrators group.

Resolution

Troubleshooting a user that cannot log in to vCenter Server:

1. Log in to vCenter Server with another user with the same permissions to check if the behavior is specific to the affected user.
2. If another user is able to login, add the appropriate permissions to the problematic user using local admin account ([e-mail] ).

Process to add permissions to the user:

1. Select vCenter object from the inventory.
2. Click the Permissions tab.
3. Click Add Permission (+).
4. Enter the user that needs permissions added.
5. Select a role for the user depending on what permissions they require. Attention, assigning the "No access" role will prevent the user from logging in, as long as the account does not have any other role already assigned to it.
   

For more information on permissions, see vSphere Permissions and User Management Tasks