SSO users with appropriate privileges are unable to perform virtual machine operations

Products

• VMware vCenter Server

Issue/Introduction

SSO users are unable to perform virtual machine operations on vSphere Client despite of a global role with appropriate privileges granted in [Global Permissions]. 

Environment

VMware vCenter Server

Cause

The operations fail due to insufficient privileges at the virtual machine level.
The granted global role is not inherited because a different role is explicitly assigned directly to children level (vCenter Server, cluster, resource pool, virtual machine folder or virtual machine own,...) and overrides the global privileges.

Resolution

Removed the granted role in the children level. The privileges granted by the global role get available. 

Additional Information

適切な権限を持つ SSO ユーザで仮想マシンの操作が実行できない