Unassigned Hosts page fails to load or redirects to different vCenters in VCF 9.x vCenter linking environment

Products

• VMware vCenter Server
• VMware Cloud Foundation

Issue/Introduction

• In a VCF 9.x environment utilizing vCenter linking, attempts to add commissioned ESXi hosts to a workload domain cluster via the vCenter UI may encounter redirection or loading issues.
• It will receive messages requesting login to a different management vCenter, or the "Unassigned Hosts" page may fail to load entirely. This behavior is typically caused by insufficient role privileges for the VCF SSO account within the SDDC Manager identity framework.
  
  
  
• When attempting to add a host to a cluster, the UI prompts for a login to a different management vCenter associated with the linked environment.
• Upon accessing the requested vCenter, the "Unassigned Hosts" or "Global Inventory" page remains blank or fails to load.
• The following error may be present in /var/log/vmware/vcf/commonsvcs/vcf-commonsvcs.log on the SDDC Manager: 
  PERMISSION_NOT_FOUND Permission not found com.vmware.evo.sddc.identity.model.error.PermissionException: Permission not found.

Environment

VCF 9.x
vCenter 9.x

Cause

The VCF Single Sign-On (SSO) user lacks the ADMIN role assignment within the SDDC Manager. In a vCenter linking configuration, the VCF plugin requires this specific authorization to aggregate and display host details across the linked vCenter instances.

Resolution

This issue is resolved by assigning the required ADMIN role to the VCF SSO user in the SDDC Manager.

1. Log in to each SDDC Manager in the linked environment using the [email protected] account.
2. Navigate to Administration > Single Sign On.
3. Click the +USER OR GROUP button.
4. Select the appropriate SSO domain and locate the VCF SSO user account.
5. Assign the ADMIN role to the user.
6. Click ADD to save the role assignment.