Unable to configure authentication in VCF Operations Orchestrator 9.x

Products

• VCF Automation

Issue/Introduction

• When attempting to configure the authentication provider of an Orchestrator 9.x instance via cli the 'vracli vro authentication set' command returns the message:
  
  pod prelude/vro-cli-###### terminated (Error)
  
  
• Reviewing the log file /services-logs/prelude/vco-app/file-logs/vco-server-app_cfg-cli.log shows 

  [ERROR] [vro-cli-######] 401 Unauthorized: "{"minorErrorCode":"UNAUTHORIZED","message":"Unauthorized","stackTrace":null}"
  org.springframework.web.client.HttpClientErrorException$Unauthorized: 401 Unauthorized: "{"minorErrorCode":"UNAUTHORIZED","message":"Unauthorized","stackTrace":null}"
          at org.springframework.web.client.HttpClientErrorException.create(HttpClientErrorException.java:105) ~[spring-web-5.3.39.jar:5.3.39]
          at org.springframework.web.client.DefaultResponseErrorHandler.handleError(DefaultResponseErrorHandler.java:168) ~[spring-web-5.3.39.jar:5.3.39]
          at org.springframework.web.client.DefaultResponseErrorHandler.handleError(DefaultResponseErrorHandler.java:122) ~[spring-web-5.3.39.jar:5.3.39]
          at org.springframework.web.client.ResponseErrorHandler.handleError(ResponseErrorHandler.java:63) ~[spring-web-5.3.39.jar:5.3.39]
          at org.springframework.web.client.RestTemplate.handleResponse(RestTemplate.java:825) ~[spring-web-5.3.39.jar:5.3.39]
          at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:783) ~[spring-web-5.3.39.jar:5.3.39]
          at org.springframework.web.client.RestTemplate.execute(RestTemplate.java:717) ~[spring-web-5.3.39.jar:5.3.39]
          at org.springframework.web.client.RestTemplate.postForEntity(RestTemplate.java:474) ~[spring-web-5.3.39.jar:5.3.39]
          at com.vmware.o11n.cli.configuration.utils.AutomationAuthenticationConfigurator.configureTenantManager(AutomationAuthenticationConfigurator.java:87) ~[o11n-thin-cli-9.0.1.0.jar:?]
          at com.vmware.o11n.cli.configuration.utils.AuthenticationUtil.registerProvider(AuthenticationUtil.java:188) ~[o11n-thin-cli-9.0.1.0.jar:?]
          at com.vmware.o11n.cli.configuration.utils.AuthenticationUtil.registerProvider(AuthenticationUtil.java:161) ~[o11n-thin-cli-9.0.1.0.jar:?]
          at com.vmware.o11n.cli.configuration.commands.authentication.SetAuthenticationCommand.runCommand(SetAuthenticationCommand.java:170) ~[o11n-thin-cli-9.0.1.0.jar:?]
          at com.vmware.o11n.cli.configuration.commands.BaseCommand.run(BaseCommand.java:20) ~[o11n-thin-cli-9.0.1.0.jar:?]
          at picocli.CommandLine.executeUserObject(CommandLine.java:1939) ~[picocli-4.6.1.jar:task ':jar' property 'archiveVersion']
          at picocli.CommandLine.access$1300(CommandLine.java:145) ~[picocli-4.6.1.jar:task ':jar' property 'archiveVersion']
          at picocli.CommandLine$RunLast.executeUserObjectOfLastSubcommandWithSameParent(CommandLine.java:2352) ~[picocli-4.6.1.jar:task ':jar' property 'archiveVersion']
          at picocli.CommandLine$RunLast.handle(CommandLine.java:2346) ~[picocli-4.6.1.jar:task ':jar' property 'archiveVersion']
          at picocli.CommandLine$RunLast.handle(CommandLine.java:2311) ~[picocli-4.6.1.jar:task ':jar' property 'archiveVersion']
          at picocli.CommandLine$AbstractParseResultHandler.execute(CommandLine.java:2179) ~[picocli-4.6.1.jar:task ':jar' property 'archiveVersion']
          at picocli.CommandLine.execute(CommandLine.java:2078) [picocli-4.6.1.jar:task ':jar' property 'archiveVersion']
          at com.vmware.o11n.cli.configuration.ThinConfigurationCli.main(ThinConfigurationCli.java:41) [o11n-thin-cli-9.0.1.0.jar:?]
  

Environment

VCF Operations Orchestrator 9.x

Cause

The used account has no access to the Provider Management (Tenant Manager) as a System Administrator, which is required in order to create Service Accounts.

Resolution

Use an account which has the role of a System Administrator.

Additional Information

Integrate VCF Operations orchestrator with VCF Automation with All Apps

Integrate VCF Operations orchestrator with VCF Automation for VM Apps

Configuring the VCF Operations Orchestrator Authentication Provider