Unable to edit NSX Ojects in NSX UI with error "You do not have permission to perform any operation on this object"
Article ID: 391878
Updated On:
Products
Issue/Introduction
Unable to edit some of the NSX objects in NSX UI, receiving the following error:
Environment
VMware NSX
Cause
Principal Identities are generally used by third-party applications or cloud management platforms such as Open stack and Pivotal Container Services (PKS) to ensure that an administrator does not modify the NSX configuration which can generate a mismatch between their view of the NSX environment and the actual configuration.
The Principal Identities (PI) are unique users in NSX who can create an object and ensure that the object can only be modified or deleted by the same identity.
Resolution
Option 1:
Use the PI Client certificate and private key to authenticate and modify the objects in NSX
Option 2:
Add the additional API header "X-Allow-Overwrite: true" to allow overwrite the object.
i.e.
curl -k -X -H "Content-Type: application/json" -H "X-Allow-Overwrite: true" GET https://localhost/api/v1/logical-switches/<UUID of logical switch> -u admin
Additional Information
Feedback
