Unable to change or delete vCenter Server permissions on an Active Directory object that changed name
search cancel

Unable to change or delete vCenter Server permissions on an Active Directory object that changed name

book

Article ID: 340803

calendar_today

Updated On:

Products

VMware Aria Suite VMware vCenter Server

Issue/Introduction

Symptoms:
Attempting to remove vCenter Server permissions on an Active Directory account fails.

Environment

VMware vCenter Server 6.0.x
VMware vCenter Server Appliance 5.1.x
VMware vCenter Server 5.1 Extended Support
VMware vCenter Server 5.0.x
VMware vCenter Server 5.5.x
VMware vCenter Server Appliance 5.0.x
VMware vCenter Server 5.x - View
VMware vRealize Log Insight 3.3 for vCenter Server 5.x STD
VMware vCenter Server 5.1.x
VMware vCenter Server 6.5.x
VMware vRealize Log Insight 3.3 for vCenter Server 6.0 STD
VMware vCenter Server 4.1.x
VMware vCenter Server Appliance 5.0
VMware vCenter Server 5.0 Beta
VMware vCenter Server 4.0.x

Cause

This issue occurs, if the object name has changed on the Active Directory, or if the case sensitivity has changed.  

Resolution

To resolve this issue,
  1. Remove the permission assignments from vCenter Server.
  2. Rename Active Directory(AD) object.
  3. Add permissions for the renamed AD object in vCenter Server.