vCenter Collector Exposes Licensing Information for Fan-In Deployments.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

 vCenter Collector Unexpectedly Exposes Licensing Information for Fan-In Deployments. The credentials used for the collector are assigned to a limited role which doesn't contain the Global.Licensing privilege.

Environment

Aria Operations 8.x

Cause

The vCenter collection account was still part of the Administrators group. Regardless of the granular permission of the account, membership in the Administrators group will supersede the granular permissions set for the account.

Resolution

Remove the account used for vCenter collection from the Administrators group in vCenter.

More detail can be found in Privileges Required for Configuring a vCenter Adapter Instance.