Unassigned Hosts page fails to load or redirects to different vCenters in VCF 9.x vCenter linking environment

Products

• VMware vCenter Server
• VMware Cloud Foundation

Issue/Introduction

• In a VCF 9.x environment utilizing vCenter linking, attempts to add commissioned ESXi hosts to a workload domain cluster via the vCenter UI may encounter redirection or loading issues.
• The "Unassigned Hosts" page may fail to load entirely or shows an error "Authorization Error : Unauthorized access".
• When attempting to add a host to a cluster, the UI prompts for a login to a different management vCenter associated with the linked environment.
• Upon accessing the requested vCenter, the "Global Inventory" page remains blank or fails to load.
• The following error may be present in /var/log/vmware/vcf/commonsvcs/vcf-commonsvcs.log on the SDDC Manager:

  PERMISSION_NOT_FOUND Permission not found com.vmware.evo.sddc.identity.model.error.PermissionException: Permission not found.

 

Environment

• VCF 9.x
• vCenter 9.x

Cause

The VCF Single Sign-On (SSO) user lacks the ADMIN role assignment within the SDDC Manager. In a vCenter linking configuration, the VCF plugin requires this specific authorization to aggregate and display host details across the linked vCenter instances.

Resolution

This issue is resolved by assigning the required ADMIN role to the VCF SSO user in the SDDC Manager.

1. Log in to each SDDC Manager in the linked environment using the [e-mail] account.
2. Navigate to Administration > Single Sign On.
3. Click the +USER OR GROUP button.
4. Select the appropriate SSO domain and locate the VCF SSO user account.
5. Assign the ADMIN role to the user.
6. Click ADD to save the role assignment.