Aria Automation Deployment creation fails with an error: : [401] [User is not authorized to perform this operation on the application. Please contact the system administrator to get access.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• When the Deployment is requested through Aria Automation with NSX network and while updating the tags it fails with following error : 
  
  2025-03-26T12:36:20.386Z INFO provisioning [host='provisioning-service-app-5b4-vp' thread='xn-index-queries-14' user='' org='' trace='' parent='' span=''] c.v.m.a.nsxt.NsxTResourceTaggingService.log:416 - [8282/provisioning/nsxt/resource-tagging-adapter] NsxTTagContext.getAuthState: SUCCESS
2025-03-26T12:36:20.386Z INFO provisioning [host='provisioning-service-app-5b-xxxxxxvp' thread='xn-index-queries-14' user='' org='' trace='' parent='' span=''] c.v.m.a.nsxt.NsxTResourceTaggingService.checkApiType:254 - Using ApiType [management] for tagging resource [VM-resource-Name] on endpoint with name [NSX-T Manager Azure Stretched]



  2025-03-26T12:36:20.625Z INFO provisioning [host='provisioning-service-app-5b4f88d74b-vcnvp' thread='OkHttp https://NSX_T-FQDN-IP/api/v1/fabric/virtual-machines?action=update_tags' user='' org='' trace='' parent='' span=''] c.v.m.a.nsxt.NsxTResourceTaggingService.log:416 - [8282/provisioning/nsxt/resource-tagging-adapter] Updating tags for VM with external id [xx-xx-xx]: FAILED with java.util.concurrent.CompletionException: class ApiException

  { details: null detailMessage: [401] [User is not authorized to perform this operation on the application. Please contact the system administrator to get access.] errorCode: 401 errorData: null errorMessage: null moduleName: null relatedErrors: null }
  
  
• When the NSX-T cloud account is Configured in Manager Mode
  

 

Environment

Aria Automation 8.18.1

Resolution

Workaround to Disable the VMs Tag in NSX: 

• Using the NSX-T Manager and do not want the VMs tagged in NSX, they can disable this functionality setting the feature toggle "nsxt.vm.tagging.enable" to false.
  
  Resolution:
• Remove the Existing the NSX-T cloud account and re-add NSX-T with Policy Mode