VM Deployment via OVF Tool Failing with Error: 'PBM Error Occurred During PreCreateCheckCallback - Invalid State'

Products

• VMware vCenter Server 8.0

Issue/Introduction

• Deployment of OVF via OVF Tool fails when using a particular user account fails with the following error in vCenter UI : A general system error occurred: PBM error occurred during PreCreateCheckCallback: Invalid state
• OVF deployments initiated through the vCenter UI when logged in as the [e-mail] user are successful.
• We can find below log entries in the vpxd.log.

yyyy-mm-dd info vpxd[XXXX] [Originator@XXXX sub=UserDirectorySso opID=XXXX] GetUserInfoInternal(VSPHERE.LOCAL\user_name, false) res: VSPHERE.LOCAL\user_name
yyyy-mm-dd info vpxd[XXXX] [Originator@XXXX sub=vmomi.soapStub[XXXX] opID=XXX] SOAP request returned HTTP failure; <<cs p:XXXX, TCP:localhost:XXXX>, /pbm/sdk>, method: preProvisionProcess; code: 500(Internal Server Error); fault: (pbm.fault.NoPermission) {
yyyy-mm-dd info vpxd[XXXX] [Originator@XXXX sub=pbm opID=XXXX] [ReInvokeWithNewSession] Retry remote call pbm.profile.ProfileManager.preProvisionProcess after exception: N3Pbm5Fault12NoPermission9ExceptionE('Fault cause: pbm.fault.NoPermission
yyyy-mm-dd error vpxd[XXXX] [Originator@XXXX sub=pbm opID=XXXX]  PBM error occurred during PreCreateCheckCallback: Invalid state

Environment

VMware vCenter Server 8.0.x

Cause

Any user attempting to create a virtual machine (VM) or disk with a defined storage profile ID must have the "StorageProfile.View" privilege assigned at the vCenter root level.

Please find the below doc for more details:
VM Storage Policies Privileges

Resolution

To resolve the issue, ensure that the "StorageProfile.View" permission is assigned to the particular user at the vCenter root level.

• Log in to the vSphere Client as an administrator.
• Navigate to Administration -→ Access Control -→ Roles
• Select the Role to modify and click Edit.
• Navigate to the section "VM storage policies" and select the checkbox next to “View VM storage policies”. Save the changes.
• For assigning the Role to a User/Group at the vCenter Root Level, select the vCenter instance and navigate to the "Permissions" tab.
• Select the user/group, click on Edit and and ensure that the modified role is chosen from the dropdown.
• Select propagate to child objects and click OK to apply the permission.