Citrix provisioning fails with ErrorMessage: Permission to perform this operation was denied.

Products

• VMware vCenter Server

Issue/Introduction

Citrix Cloud DaaS is unable to provision VMs in the vSphere environment.

The service account created for this work can log into the vSphere Client UI and browse inventory, perform tasks on the VMs.

In vCenter Server journalctl logs, you see a permission issue for that account.

journalctl_-b--0.txt:Month Day HH:MM:SS <vCenter Server FQDN> vpxd[6557]: Event [56717955] [1-1] [YYYY-MM-DDTHH:DD:SS Z [vim.event.EventEx] [warning] [] [Datacenter Name] [56717955] [Privilege check failed for user <identitySource>\<Citrix account name> for missing permission <Permission Missing>. Session user performing the check: ]

 

Environment

VMware vCenter Server 8.x

Cause

Permissions issue at one or more objects needed to perform the provisioning.

Resolution

Add the missing privileges back to the user or Role assigned to the user and run the Cloud admin provisioning task again.

vSphere Permissions and User Management Tasks

Additional Information

Using the "authz-doctor" tool to identify vCenter permission issues