Error 500 from Aria Automation REST API endpoint /iaas/api/deployments/<deploymentID> when 'Deployment sharing' is disabled in Aria Automation 8.18.1

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• HTTP 500 error returned from REST API calls.

• Workflow execution fails specifically for users with only the Service Broker User role.

• Issue occurs explicitly when Deployment sharing is disabled in project settings.

• The issue does not occur with administrative users or when deployment sharing is enabled.

• Issue did not exist in previous releases such as 8.18.0.

Environment

VMware Aria Automation 8.18.x

Cause

Aria Automation 8.18.1 introduced stricter permission requirements for accessing the deployment API (/iaas/api/deployments/<deploymentID>). When 'Deployment sharing' between users is disabled in a project, users with only the Service Broker User role will encounter an error 500.

Resolution

Modify workflow REST API calls from:

GET /iaas/api/deployments/<deploymentID>

to

GET /deployment/api/deployments/<deploymentID>/resources

Additional Information

Alternatively, enabling Deployment sharing in the Project settings within Aria Automation Infrastructure > Projects > Users will allow access to the original /iaas/api/deployments endpoint. However, using the /deployment/api endpoint is the preferred solution for security and role-based access control considerations.