Shared vApp Virtual Machines Not Visible to Tenant Users When “Allow Access to All Organization VDCs” Privilege Is Enabled

Products

• VMware Cloud Director

Issue/Introduction

• Tenant users are unable to view or access virtual machines (VMs) within vApps which are shared with them

• The issue occurs even though the vApps and VMs are correctly shared with the user or group.

• The issue resolves when specific Access Control privileges are modified.

Environment

VMware Cloud Director 10.x

Cause

This behavior may occur when the “Allow Access to All Organization VDCs” privilege (found under Access Control > Organization) is enabled.

When active, this privilege can interfere with visibility or access rules applied to shared vApps, preventing tenant users from viewing or managing virtual machines they should have access to.

Resolution

To resolve the issue:

1. Log in to the VMware Cloud Director provider or organization portal with administrative privileges.

2. Navigate to the Role assigned to the affected user or group:
   Access Control > Organization

3. Locate the privilege:
   Allow Access to All Organization VDCs

4. Disable this privilege.

5. Have the affected users log out and log back in.

6. Verify that shared vApp VMs are now visible to the intended users.