"Need some or all of the following rights [ORG_VDC_ADMIN_VIEW] to perform operations [ORGANIZATION_VDC_VIEW] on xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx or the target entity is invalid." error when trying to open an Organization VDC using a read-only user.

Products

• VMware Cloud Director

Issue/Introduction

• The affected user has only Read-Only access in VMware Cloud Director.
• The user may be locally created or can be an imported user into VMware Cloud Director having the read-only access to the UI.

Environment

VMware Cloud Director 10.5.1

Cause

The newly created read-only role for the user(s) seems to have all the 176 View rights but 0 Manage rights in Roles. 

Resolution

From the VMware Cloud Director UI: 

1. Login as the System Administrator in the Provider portal.
2. Click on Administration.
3. Click on Provider Access Control.
4. Navigate to the Roles.
5. Click on the newly created role for the read-only user(s) and press Edit.
6. Navigate to the Access Control and expand the Organization tab.
7. Check the following rights from the Manage tab: Share the content Hub External Source, Manage the Kerbos settings, Manage Quotas of Organization, Administer and traverse into other organizations, Use Provider LDAP as Tenant.
8. Now navigate to Compute and expand the Organization VDC tab. 
9. Click on manage and check the following rights: Open Organization VDC Network in vSphere, Open Organization VDC Storage Policy in vSphere, Set Default Storage Policy and Manage stranded items.