Unable to publish a global role to tenant
search cancel

Unable to publish a global role to tenant

book

Article ID: 388950

calendar_today

Updated On:

Products

VMware Cloud Director

Issue/Introduction

  • When trying to  publish a global role to tenant the error below occurs:

    [########-####-####-########f89b] This role is currently assigned to one or more users or groups. You must reassign them before deleting this role.

  • When publishing a role, selecting  "Show selected" shows no result.
  • When checking the Organization the role was published to via the below API, from the response header it is possible to see that the role has been already published to more than 150 Organizations:

    GET https://cloud.example.com/cloudapi/1.0.0/globalRoles/urn:vcloud:globalRole:########-####-####-########3856

Environment

VMware Cloud Director 10.6.x

Cause

The API request header size is too big. 

Resolution

There is no solution.

WORKAROUND

Increase the request header sizes below:

  1. Take the DB backup
  2. SSH the VCD primary cell
  3. Run below command 
    /opt/vmware/vcloud-director/bin/cell-management-tool manage-config -n vcloud.http.maxRequestHeaderSize -v 24576
  4. Restart all the VCD cells.  For more information, see at Perform an Orderly Shutdown of Your VMware Cloud Director Appliance Cluster