vCenter /var/log/vmware/vmware-updatemgr/vum-server/vmware-vum-server.log shows
<DATE> info vmware-vum-server[#######] [Originator@#### sub=IntegrityAuthzServiceHelper] [AuthzServiceHelper ###] User: vpxd-####-####-####-####@<vCenterDomain.local> does
not have Privilage: VcIntegrity.lifecycleSoftwareSpecification.Read on entity:domain-#####
*Please note that Privilage is indeed misspelled like that in the logprints
User: vpxd-####-####-####-####@<vCenterDomain.local> has been assigned a lower permissions role to another object.
Before performing this take a file based backup of the vCenter per File-Based Backup and Restore of vCenter Server
Also take a powered off snapshot the vCenter Server Appliance. If the vCenter is part of a Linked Mode replication power off all VCs at the same time and take a snapshot on each. If you need to revert to a snapshot, they'll all need to be restored.
Locate the object with the non-administrator role in its permissions of the vpxd-####-####-####-####@<vCenterDomain.local> user and remove it.