Exclude the VMware Cloud Directory Availability plugin from tenants in VMware Cloud Director

Products

• VMware Cloud Director

Issue/Introduction

• After configuring VMware Cloud Director Availability (VCDA) to utilize VMware Cloud Director (VCD) in a cloud site, the plugin is published to organizations that should not have visibility or access.
• After unpublishing the plugin from tenants in VCD, as in Publish or Unpublish a Plug-in from a VMware Cloud Director Organization, the changes are reverted automatically.

Environment

VMware Cloud Director Availability 4.x

Cause

VCDA periodically updates the plugin registration up to and including republishing the plugin if it has been removed externally. In particular, VCDA will expose tenants to the plugin if they have the rights to create replications or migrations, which will overwrite any changes made to the plugin publication in VCD. This is the expected and designed behavior, which cannot be disabled.

Resolution

To exclude the plugin from a tenant in VCD, remove all rights to create a protection or migration form an organization using the following procedure:

1. Log into the VCDA user interface with administrative privileges.
2. Navigate to Configuration > Policies
3. Create a new replication policy, as detailed in the following document: Create a replication policy
4. Disable all incoming and outgoing protections and migrations, as in the following example:
   
   
    
   * The policy name provided is an example only and can be altered to a preferred identification.
   
   
5. Assign the organizations that should not have visibility to the plugin.

Please note: There is a default VCDA plugin stub that can be included in VCD. Once access to the active plugin has been removed, this stub may become visible to the tenant.