Password manager options are grayed out for all accounts in SDDC Manager "This operation is not allowed because SDDC manager back up operations are working"

Products

• VMware SDDC Manager

Issue/Introduction

• Options for user account operations in password manager like remediate and rotate are grayed out. Following informative banner is displayed:
  "This operation is not allowed because SDDC manager back up operations are working"


• SDDC manager will have a failed backup job.
  
  
• Running the following query in SDDC manager database gives a deployment lock: 
  /usr/pgsql/13/bin/psql -h localhost -U postgres -d platform -c "select * from lock;" 
  
  The output of the above will have an active lock with resource_type as deployment. 

Environment

VCF 5.x

Cause

This issue occurs when a restore operation in SDDC Manager fails to release a deployment lock that was previously acquired by a backup operation. As a result, any new deployment-related operations are blocked due to the lingering lock entry.

Resolution

Important: Always take a snapshot of the SDDC Manager appliance before performing any database-level modifications.

1. SSH into the SDDC Manager appliance as the root user.
2. Validate whether an active lock exists for resource_type as deployment:
   /usr/pgsql/13/bin/psql -h localhost -U postgres -d platform -c "select * from lock;"


3. Delete the DB lock entry:
   /usr/pgsql/13/bin/psql -h localhost -U postgres -d platform -c "delete from lock where resource_type='deployment';"
   
   
4. Verify the Password Manager options are visible in the SDDC Manager.

Additional Information

Please refer : Users Unable to Perform Domain Operations in SDDC Manager Due to Deployment Lock Held by Backup Operation