[VMC] "Not enough privileges to execute this action" when editing/removing a custom role.

Products

• VMware Cloud on AWS
• VMware Cloud on Dell EMC

Issue/Introduction

The purpose of this document is to provide remediation steps to allow the customer to make changes to a custom role that was created in the Cloud vCenter.

Symptoms:
Customer may be prompted with the error "Not enough privileges to execute this action" when attempting to remove, edit or clone a custom role in the Cloud vCenter. 

Cause

The custom role was given more permissions than the cloudadmin role. Cloudadmin is the highest permissions that are provided in VMware Cloud, and any permissions that are added which are not part of the cloudadmin permissions (CloudAdmin Privileges (vmware.com)) will lock up the role and not allow any changes to be made.

Resolution

Confirm if the role is able to be edited or removed using the [email protected] credentials. If the role is unable to be changed using cloudadmin, file a Support Request (Creating and managing Broadcom support cases) with VMware Cloud Global Support with a screenshot of the error and the custom role that was created.

Additional Information

Impact/Risks:
Giving the role more permissions than cloudamin will cause it to lock up and will prevent any edits or removal of the role until VMware Cloud support is engaged.