Error: "This operation is denied" when attempting to view or modify VM Placement Policies and VM Sizing Policies in VMware Cloud Director

Products

• VMware Cloud Director

Issue/Introduction

• You are unable to view or manage VM Placement Policies and VM Sizing Policies in VMware Cloud Director
• Multisite is configured 
• In the /opt/vmware/vcloud-director/logs/vcloud-container-debug.log you see entries similar to:
  
  2025-02-07 08:59:30,959 | DEBUG    | pool-jetty-35             | MultisiteAuthContextFilter     | Unexpected exception determining tenant context. | requestId=########-####-####-####-############,
request=GET https://example.com/cloudapi/2.0.0/vdcComputePolicies/urn:vcloud:vdcComputePolicy:########-####-####-####...,requestTime=1738918770956,remoteAddress=XXX.XXX.XXX:58943
,userAgent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...,accept=application/json;version 40.0.0-alpha;multisite global
java.lang.NullPointerException
at com.vmware.ssdc.backend.dao.impl.ComputePolicyDaoImpl.lambda$transformToVdcComputePolicySpecs$112(ComputePolicyDaoImpl.java:4259)
at java.base/java.util.stream.ReferencePipeline$2$1.accept(ReferencePipeline.java:176)
at java.base/java.util.Collections$2.tryAdvance(Collections.java:4747)
at java.base/java.util.Collections$2.forEachRemaining(Collections.java:4755)
at java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484)
at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474)
at java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913)
at java.base/java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234)
at java.base/java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578)
at com.vmware.ssdc.backend.dao.impl.ComputePolicyDaoImpl.transformToVdcComputePolicySpecs(ComputePolicyDaoImpl.java:4260)
at com.vmware.ssdc.backend.dao.impl.ComputePolicyDaoImpl.getVdcComputePolicy(ComputePolicyDaoImpl.java:2275)

Environment

VMware Cloud Director 10.6
VMware Cloud Director 10.6.0.1
VMware Cloud Director 10.6.1

Cause

This issue occurs in Multisite environments when the UI incorrectly uses the VMware Cloud Director site base URL from where the end user is logged into for fetching individual sizing policy details which belong to other VMware Cloud Director sites.

Resolution

This issue is resolved in 10.6.1.1  available at Broadcom Downloads.

Workaround is to use API to review the policy details. 

• For OVDC compute policies, refer https://developer.broadcom.com/xapis/vmware-cloud-director-api/v36.2/cloudapi/2.0.0/vdcComputePolicies/get/ 
• For PVDC compute policies, refer https://developer.broadcom.com/xapis/vmware-cloud-director-api/v37.3/cloudapi/1.0.0/pvdcComputePolicies/get/