Files inside datastores are not visible due to insufficient privileges

Products

• VMware vCenter Server

Issue/Introduction

• When trying to navigate to a datastore > Files you get an error:
  You don't have privileges to manage files 
• The user directly has or is part of a group with domain privileges 
• The issue is not seen when using SSO admin ([email protected]) 
• Administrator privileges are set at Global Permissions level or vCenter object level and propagated down 

Environment

VMware vCenter Server 8.x 

Cause

• vCenter enforces the rule with least privileges 
• The user/group may be part of nested groups that have lower privileges assigned to datastore or datacenter objects and these take precedence over the administrator privileges assigned at Global Permissions or vCenter object level 

Resolution

Verify that the user/group does not have lower privileges assigned at the datastore or datacenter object level