User with Network admin role not able to access NSX load balancer objects in Aria operations

Products

• VMware NSX
• VMware Aria Operations (formerly vRealize Operations) 8.x

Issue/Introduction

A user with Network admin role fails to access the NSX objects in Aria operations with the below error in Aria:

 2025-01-01 T00:11:00,657+0000 ERROR [NSX-T Resource Collector thread 16, time: 2025-01-01 T00:11:00 UTC 2025] (1660) com.vmware.adapter3.nsxt.util.NsxtApiUtil.getSyslogServiceExportersData - Error in fetching the node service Exporters properties for management service(syslog), exception caused is:

com.vmware.vapi.std.errors.Unauthorized: Unauthorized (com.vmware.vapi.std.errors.unauthorized) => {

    messages = [],

    data = struct => {error_message=User is not authorized to perform this operation on the application. Please contact the system administrator to get access., error_code=401, module_name=common-services},

    errorType = UNAUTHORIZED

Environment

VMware NSX 

VMware Aria Operations

Cause

The Network admin role does not have access to Load balancer objects. 

Resolution

Change the role of the user to Auditor instead of Network admin. As Auditor role will have access to the Load balancer objects. 

Note: Cloning the Network admin role and giving it "read-only" or "Full access" permission will not fix the issue as the new role will be custom role and not system role. As per the KB https://knowledge.broadcom.com/external/article/390631/custom-role-based-users-accessing-the-ns.html custom role is not supported to access the Manager objects. We need to use system role to access the manager objects.