"Failed to validate root password. Provide correct root password to authorize this action." when viewing passwords in Aria Suite Lifecycle locker with Active Direcory users

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Attempts to view locker passwords in Aria Suite Lifecycle's locker component when logged in with an active directory user fails with: 

  Failed to validate root password. Provide correct root password to authorize this action.

• Logging with the AD user and try to view the locker password, following exception is seen in /var/log/vrlcm/vmware_vrlcm.log: 

  ERROR vrlcm [####]  InputValidationExceptionHandlingController] -- Handling AccessDeniedException with error message: Access is denied

Environment

Aria Suite Lifecycle 8.18.x

Cause

This behavior is by design for security reasons.

Resolution

Only the local Lifecycle Manager admin accounts admin@local and vcfadmin@local have the permissions to view locker passwords. 

For SDDC managed Lifecycle Manager, login with local admin account: vcfadmin@local.