Tenant users unable to view or generate API Tokens in VMware Cloud Director

Products

• VMware Cloud Director

Issue/Introduction

• Users do not see the 'API Tokens' option under User Preferences within the VMware Cloud Director tenant portal.

Environment

VMware Cloud Director 10.6.x

Cause

 In order for a tenant user to generate an API token, they will require the 'Manage user's own API token' right, as in the following:

Generate an API Access Token Using Your VMware Cloud Director Tenant Portal

This right is not available by default, which prevents the option from being available without an explicit change to the configuration.

Resolution

A rights bundle will need to be created or modified to publish this right to the tenant, since it is not available by default:

Managing Rights Bundles in VMware Cloud Director

Once the right is published, it will still need to assigned to the appropriate roles for the users in most cases:

Managing VMware Cloud Director Rights and Roles

If the user is in an existing session, they will need to log out and back in for the changes to take effect.

Additional Information

In order to manage tokens for other users, the 'Manage all users' API tokens' right is required, as discussed in the following document:

Manage the API Token of a VMware Cloud Director User

This only provides the ability to see the existence of tokens and to revoke them. VMware Cloud Director does not provide the means for users to create API tokens for other accounts.