OVA Deployment fails with "Unable to Process Template"

Products

• VMware vCenter Server 8.0

Issue/Introduction

OVA Deployment fails from the local share and from the Content Library with "Unable to process template".

In the cls.log on the vCenter, noted permission related errors.

| ERROR | OPID | cls-simple-activity-24 | CompleteTaskActivity | Failed to state for task: taskId=********, state=ERROR, error is Permission to perform this operation was denied.. Retry in 50,000 ms. 3 attempt (s) left java.util.concurrent.ExecutionException: (vim.fault.NoPermission) {
    faultCause = null,
    faultMessage = null,
    object = ManagedObjectReference: type = ClusterComputeResource, value = domain-c8, serverGuid = ******,
    privilegeId = Task.Update,
    missingPrivileges

Use "Authz-doctor" tool to view permissions

• Using the "authz-doctor" tool to identify vCenter permission issues
  • https://knowledge.broadcom.com/external/article?articleNumber=369938

    • /usr/lib/vmware-vpx/scripts/authz-doctor/authz-doctor.py permission_check

      • 

Environment

vCenter 8.x

Cause

Users and Roles created with ReadOnly privileges causing the deployment of OVA's from the Content Library to fail with Permission related errors.

Resolution

To resolve this issue remove the custom roles set to "ReadOnly" role name.

Additional Information

Using the "authz-doctor" tool to identify vCenter permission issues

• https://knowledge.broadcom.com/external/article?articleNumber=369938