Error reading customization specification when deploying from a template

Products

• VMware vCenter Server
• VMware vSphere ESXi

Issue/Introduction

• When deploying a virtual machine from a template using customization, you may see the errors:
  
  

  • Error reading customization specification
  • Permission to perform this operation was denied. You do not hold privilege "System > Read" on OptionManager "VpxSettings"
  • Error occurred while retrieving customization specification from the server
    

  
  
• This issue occurs if users are added in vCenter Server, assigned Administrator privileges at the Datacenter Level, and propagated
• This issue does not occur if Administrator privileges are assigned at the vCenter Server level.

Environment

VMware VirtualCenter 2.5.x
VMware vCenter Server 5.0.x
VMware ESX Server 3.5.x
VMware vCenter Server 4.0.x
VMware vCenter Server 4.1.x

Resolution

Customization specifications are VirtualCenter centric. That is, they exist at the VirtualCenter level, which is above the Datacenter level. Providing access at the Datacenter level does not provide adequate permissions, resulting in the error message.

You need to ensure users have adequate permissions.

To ensure users have adequate permissions:

1. Create a new custom role and give it the privileges:
   
   Virtual Machine > Provisioning > Read Customization Specifications
   Virtual Machine > Provisioning > Modify Customization Specifications
   
   
2. Assign the user(s)/group this role at the VirtualCenter level without propagation so adequate permissions are granted.