Update Password task in SDDC Manager for Operations for Logs fails with "Current user does not have permission for current action"

Products

• VMware SDDC Manager

Issue/Introduction

Update Password task in SDDC Manager for Operations for Logs would fail with the below:

Unable to update admin credential of VMware Aria Operations for Logs on VMware Aria Operations . Error code: 403 Body: {"message":"Current user does not have permission for current action","moreInformation":[{"name":"errorMessage","value":"Operation is not allowed for credential - {credential-id}"}],"httpStatusCode":403,"apiErrorCode":1528}

Environment

VCF 5.x

VMware Aria Operations for Logs

Cause

The Admin account on the Operation for Logs may be locked on 1 or more appliances. 

Resolution

1. SSH to each Operations for Logs appliance and run the following command:
   /usr/lib/loginsight/application/sbin/li-reset-admin-passwd.sh –unlockAdmin
2. Confirm the current admin password is successfully able to log into each node. If any node fails, manually update the admin password directly on the node. 
3. Confirm the the update password task can run successfully after unlocking the admin account.