Error: "Either you need some or all of the following rights [VAPP_DELETE] to perform operations [VAPP_RECOMPOSE] for <vapp_id> or the target entity is invalid" when attempting to add a VM to a vApp

Products

• VMware Cloud Director

Issue/Introduction

• Attempting to add a VM to an existing vApp in Cloud Director using the /api/vApp/vapp-<vapp_id>/action/recomposeVApp API call fails as a Tenant user with an error of the form:
  
  message="[ ########-####-####-####-############ ] Either you need some or all of the following rights [VAPP_DELETE] to perform operations [VAPP_RECOMPOSE] for ########-####-####-####-############ or the target entity is invalid." majorErrorCode="403" minorErrorCode="ACCESS_TO_RESOURCE_IS_FORBIDDEN"/>
  
  
• The action to Add VM to a vApp is greyed out.
• Creating new vApps succeeds without issue.

Environment

• VMware Cloud Director 10.6.1

Cause

This issue occurs if the Delete a vApp Right is not present on both the Role assigned to the Tenant user and a Rights Bundle assigned to the Tenant's Organization.

The Delete a vApp Right is needed for multiple operations including for vApp Delete and vApp Recompose.

Resolution

To resolve the issue add the Delete a vApp Right to the Role assigned to the Tenant user and to a Rights Bundle published to the Tenant's Organization.

To add Rights to a Tenant Global Role follow the documentation, Managing Global VMware Cloud Director Tenant Roles.

To add Rights to a Rights Bundle and publish it to an Organization follow the documentation, Managing Rights Bundles in VMware Cloud Director.

Additional Information