Infoblox error message IP ALLOCATE failed: Action run failed with the following error

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

A provisioning task fails with the following Infoblox error messages:

IP ALLOCATE failed: Action run failed with the following error: ('Error allocating in network or range: Cannot create \\'record:host\\' object(s): b\\'{ "Error": "AdmConProtoError: #.#.#.#/##,default does not match any unique networks/ranges (ipv4addr)", \\\\n "code": "Client.Ibap.Proto", \\\\n "text": "#.#.#.#/##,default does not match any unique networks/ranges (ipv4addr)\\\\n}\\' [code 400]', {})

or

IP ALLOCATE failed: Action run failed with the following error: "Cannot create 'record:host' object(s): b'{ \"Error\": \"AdmConDataError: None (IBDataConflictError: IB.Data.Conflict:Extensible attribute Tenant ID is required.)\", \"code\": \"Client.Ibap.Data.Conflict\", \"text\": \"Extensible attribute Tenant ID is required.\"}' [code 400]"

Note: The Extensible Attribute in the Error may differ, i.e. VMware resource ID

Environment

Aria Automation 8.18.x

Cause

The failure is caused by insufficient permissions for the user account involved in the Infoblox integration.

According to Infoblox documentation, several WAPI permissions are required (1).

Without the proper access rights, the system is unable to perform various administrative tasks in Infoblox.

(1) Infoblox WAPI user permissions

Resolution

To resolve this issue, ensure the user account has the appropriate permissions to access network ranges in the Infoblox IPAM product:

1. Review Infoblox Permissions:

   • Access the Administration tab on your Infoblox appliance.
   • Check user roles, groups, and permissions.

2. Required Permissions:

   • Ensure the user is part of a group with Administrator or Superuser permissions.
   • Alternatively, the user can be in a custom group that holds at least the following permissions:
     • DHCP, DNS, IPAM, and Grid.

These permissions allow the VMware vRealize Automation(vRA) Infoblox IPAM integration to function correctly, enabling IP allocations and operations related to cloud templates and deployments.

Additional Information

If Cloud Licensing has been applied in Infoblox, there may be additional permissions needed. In some cases, when the Extensible Attribute is added in Infoblox, Cloud Members may need to be allowed access to the Extensible Attribute.