ASSIGN_ROLE_POST_VALIDATION_FAILED or Role vRealize Automation to vSphere Integration hasn't been assigned

Products

• VMware Cloud Foundation

Issue/Introduction

• Unable to create VCF cloud endpoint in the VMware Aria Automation.
  

  Timeout in remote operation after 80 seconds. Operation POST http://<vra_fqdn>:8090/content/api/vcf/########-####-####-####-############/domain/########-####-####-####-###########/service-accounts, opld ########

  
  
• Unable to create service account for VMware Aria Automation
  
  Task: Create service account - Sub task "ASSIGN_ROLE_POST_VALIDATION_FAILED" 

"name":"Assign User Roles in vCenter Server",
"localizableNamePack":"component":"com.vmware.evo.sddc.vsphere.contract.VsphereContractPlugin","messageKey":"AssignUserRolesInVc.name","bundle":"com.vmware.evo.sddc.vsphere.contract.VsphereContractPlugin"},
"description":"Assign User Roles in vCenter Server",
"localizableDescriptionPack":{"component":"com.vmware.evo.sddc.vsphere.contract.VsphereContractPlugin","messageKey":"AssignUserRolesInVc.desc","bundle":"com.vmware.evo.sddc.vsphere.contract.VsphereContractPlugin"},
"status":"Failed","errors":[{
"errorCode":"ASSIGN_ROLE_POST_VALIDATION_FAILED",
"arguments":["<vcenter_fqdn>","Role vRealize Automation to vSphere Integration <domain>\<user> been assigned to user vra-svc-########-####-####-####-############@<domain> ."],
"message":"The following role assignments failed in vCenter <vcenter_fqdn>: Role vRealize Automation to vSphere Integration <domain>\<user> been assigned to user vra-svc-########-####-####-####-############@<domain> .","referenceToken":"######"}         

Environment

VMware Cloud Foundation 5.x

Cause

Duplicate role "vRealize Automation to vSphere Integration" in the VCenter

Resolution

1. Take snapshot of the VCenter servers. If the VCenters are in ELM ensure to take snapshots of all the VCenters.
2. Remove the users assigned to both the roles.
3. Now remove the duplicate role "vRealize Automation to vSphere Integration" 
   1. Horizontal Ellipses menu > Administration >  Roles
   2. Remove one of the "vRealize Automation to vSphere Integration" role
4. Now create a new VCF endpoint in the VMware Aria Automation. 
5. New service account will get created in vCenter and  "vRealize Automation to vSphere Integration"  role get assigned.