Tenant users are unable to create Routed Data Center Group Networks
search cancel

Tenant users are unable to create Routed Data Center Group Networks

book

Article ID: 404479

calendar_today

Updated On:

Products

VMware Cloud Director

Issue/Introduction

  • Tenant users are unable to create a network segment inside the respective tenant.
  • The user is unable to see Data Center Groups or Edge Gateways scoped to Data Center Groups.
  • Attempting to create a Routed Organization VDC Network fails during the creation dialogue with a message:

    The VDC "<ORG_VDC_NAME>" has no available Edge Gateways.

  • Tenant user has a Role such as Organization Administrator that has the required Data Center Group Rights including "View VDC Group".

Environment

  • VMware Cloud Director 10.6.x
  • VMware Cloud Director 10.5.x

Cause

In order to create a Routed Data Center Group Network the Tenant user requires the "View VDC Group" Right.

Both the Global Role assigned to the user and the Organization itself need to have this Right.

Resolution

Confirm the Global Role assigned to the Tenant user has the  "View VDC Group" Right enabled by logging in as a System Administrator and viewing the Global Role under Administration > Tenant Access Control > Global Roles.
This Right is located under the Networking > VDC Group section.
For more information on editing the Rights assigned to a Global Role, see the documentation on Managing Global VMware Cloud Director Tenant Roles.

Also confirm that the Rights Bundles assigned to the Tenant user's Organization also has the "View VDC Group" Right enabled by logging in as a System Administrator and viewing the Rights Bundles under Administration > Tenant Access Control > Rights Bundles.
Either add the "View VDC Group" Right to an existing Rights Bundle published to the Organization, such as the Default Rights Bundle, or create a new Rights Bundle with this Right and publish it to the desired Organizations.
This Right is located under the Networking > VDC Group section.
For more information on editing the Rights assigned to a Rights Bundle, see the documentation on Managing Rights Bundles in VMware Cloud Director.

Once both the Global Role and the Organization's Rights Bundles have the "View VDC Group" Right enabled, then log out and in again as the Tenant user to be able to create Routed Data Center Group Networks.

Additional Information

For more information on creating Routed Data Center Group Networks see the documentation here, Create a Routed Data Center Group Network Backed by NSX in the VMware Cloud Director Tenant Portal.