Virtual Services Not Populating While Creating GSLB Service (Virtual Service Selection) Due to Missing User Tenant Permissions

Products

• VMware Avi Load Balancer

Issue/Introduction

• When creating a GSLB service on GSLB leader under a non-admin or different tenant (e.g., DEV), the Virtual Service list does not populate after selecting the Active follower site under GSLB Pool → Pool Members → Virtual Service.

• Logs from Leader Node

  Location: /var/lib/avi/log

  apiserver.DEBUG

2026-04-17T03:14:54.410Z Req for GET uri ... RespCode 403
2026-04-17T03:14:54.411Z Error: User 'gslb_admin' is not allowed to access tenant 'DEV'

• UI Observation (Browser Inspect)

  If you check the Network → Response tab, you will see:

 

Environment

• Avi Load Balancer

Cause

• This issue occurs when the credentials used to add the follower site as a GSLB member to the leader do not have access to the required tenant (e.g., DEV) on the Gslb Active follower site.

Resolution

• Add the required tenant to the Gslb user on the Gslb Active follower site:

Steps:

• Navigate to: Administration → Users
• Edit the user (e.g., gslb_admin)
• Add the required tenant (e.g., DEV) from which Virtual Services need to be fetched