Unable to activate Log Collection for Management or Workload Domain in VCF Operations

Products

• VCF Operations

Issue/Introduction

In VMware Cloud Foundation (VCF) Operations, users may find they are unable to activate Log Collection for either the Management or Workload domain under the VMware Cloud Foundation (VCF) Adapter.

Even after selecting the Activate Log Collection radio button and clicking Save this domain, the changes are not saved. A banner is displayed indicating that the configuration is in read-only mode.

Environment

VCF Operations 9.0.x

Cause

This behavior is working as designed and is not an error.

Starting with Legacy Aria Operations 8.16.x, a feature was introduced to enforce credential ownership. If the user logged into VCF Operations is not the owner of the credentials used for the VCF adapter or any other product integration, the configuration is restricted to read-only mode.

The following banner is displayed:

“You are viewing this account configuration in read-only mode, because you are not the owner of these applied credentials. You will only be able to make changes to the account if you provide your own credentials.”

As a result, settings such as Log Collection cannot be modified or saved by non-owners.

Resolution

To successfully activate Log Collection, use one of the following methods:

 

Option 1: Log in as the Credential Owner

• Log in to VCF Operations using the same user account that owns the credentials used for the VCF adapter integration, and then activate Log Collection.

Option 2: Configure Log Collection from the Product UI

• Log in to the VCF Operations Product UI as an admin user ( https://<VCF_OPS_FQDN_OR_IP>/ui )
• In the left panel, navigate to Administration > Integrations
• Expand the VMware Cloud Foundation Adapter.
• Click the three dots next to the vCenter Server for which you want to activate Log Collection.
• At the top, select Domain, then choose the Management or Workload domain.

Now, either:

• Use the System Managed Credential by selecting the Activate radio button
  
  OR
  
  
• Create a new credential for the domain by clicking the ' + ' icon next to Credential.
• Validate the connection.
• Activate Log Collection.
• Click Save this domain, then click Save.
• After completing these steps with proper credential ownership, Log Collection is successfully activated.

Additional Information

Additional references:

• To change or update the ownership of the credentials, following KB can be referred: Adapter credentials in Aria Operations cannot be edited
• One can also choose to deactivate Credential ownership enforcement in global settings under Administration so that anyone can view/modify the credentials without any need of taking the ownership. For more details on the feature refer to the below document: Credential ownership enforcement