Failed to load host details when accessing Network Pools from a workload domain vCenter

Products

• VMware Cloud Foundation

Issue/Introduction

• When attempting to access Network Pools from within a workload domain vCenter UI, the operation fails with a 500 error. Users typically observe the following error message in the browser
  
  Failed to load host details. Http failure response for https://vcenter.domain.local/plugins/com.vmware.vcf.client-9.x/sddcmanager.domain.local-443/plugin/api/internal/networkpoolslist: 500 OK
  
  

• This issue occurs specifically when navigating to the VMware Cloud Foundation (VCF) plugin components while logged into a vCenter Server associated with a workload domain.

Environment

VCF 9.x

Cause

• Network Pools are global resources managed by the SDDC Manager and are intended to be accessed and managed directly through the management domain vCenter or the SDDC Manager UI.
• This error occurs because the workload domain vCenter lacks the necessary permissions to process these internal API calls, especially when a user has been explicitly granted SDDCAdmins permissions at the workload domain level.
• This is considered an unsupported configuration or an unexpected scenario for the workload domain vCenter plugin.

Resolution

To resolve the error and restore expected behavior, follow these steps:

1. Log in to the vCenter UI for the affected workload domain.

2. Identify the user or group experiencing the error.

3. Remove the user or group from the SDDCAdmins role in the workload domain.

Note: Ensure the user retains the necessary permissions on the management domain vCenter to manage Network Pools.