vCenter user does not have the needed permissions to complete the operation errors occur when configuring the lookup service for VMware Cloud Director Availability with VMC on AWS

Products

• VMware Cloud Director

Issue/Introduction

• A VMware Cloud Director Availability on-premise appliance has been deployed.
• When configuring the lookup service to point to a VMC on AWS SDDC, an error similar to the following occurs:
  
  vCenter user does not have the needed permissions to complete the operation
  
  
• In the /opt/vmware/h4/replicator/log/replicator.log , errors similar to the following are seen:
  
  

  2025-01-13 19:39:51.908 ERROR - [UI-########-####-####-####-############-####-##] [https-jsse-nio-8440-exec-10] c.v.h.c.c.error.ExceptionAdvisorBase     : A POST request from root[10.87.2.104] to /config/lookup-service failed.

  com.vmware.h4.exceptions.common.NoPermissionsVcUserException: vCenter user does not have the needed permissions to complete the operation.
        at com.vmware.h4.common.service.BaseConfigService.validateSsoAdminCredentials(BaseConfigService.java:180)
....

Environment

Vmware Cloud Director Availability 4.x

Cause

There are limitations that prevent an on-premise appliance from being used directly with VMC on AWS. By design, only the provider installation of VMware Cloud Director Availability (vCDA) is supported for use with VMC on AWS SDDC environments for migrations (not protections). Initially, only migrations into the cloud were supported, but vCDA 4.6 introduced the ability to migrate back to the on-premise environment.

Resolution

Deploy the provider installation of VMware Cloud Director Availability for use with the VMC on AWS SDDC, as detailed in the following document:

Migration to VMware Cloud Director service Guide

Additional Information

For additional information regarding replication and migration scenarios, please refer to the following document:

Replicating workloads