Unable to add users to a File Share at the SMB share level, receiving an error: "Access Denied"

Products

• VMware vSAN

Issue/Introduction

The vSAN Skyline Health indicates that there are no current alerts related to vSAN File Services. 

SMB File Share is being accessed through MMC console from a windows client. 
While the share allows permissions for "Everyone," attempting to add specific users at either the SMB share level or the root "vsanfs" level produces an error stating, "Changes cannot be saved. Access is denied."

 

Environment

VMware vSAN 8.x
VMware vSAN 9.x

Cause

The account utilized to log into the Windows client lacks the necessary permissions to modify the File Share.
The only account that possesses full permissions on the file server is the AD account employed during the creation of the File Service Domain.

Resolution

Refer to the article vSAN File Services - Accessing SMB File Share and log in using the Active Directory account that was utilized during the initial setup of the File Service Domain.
This AD account also knows as 'file service admin user' must be an administrator on the windows client to be able to RDP to it and run the MMC command.
With this account, incorporate additional users into the file share and grant them full permissions.