BOSH Director failed with an error "CPI 'create_vm' method responded with error: CmdError{"type":"Unknown","message”:”Permission to perform this operation was denied"}"

Products

• Operations Manager

Issue/Introduction

When upgrading BOSH Director or deploying a fresh installation , apply changes failed with the following error :

[File System] 2026/05/05 11:40:49 DEBUG - Remove all /home/tempest-web/.bosh/installations/35-XXXXXXXXX/tmp/bosh-release3XXXXXXX


[CLI] 2026/05/05 11:50:49 ERROR - Deploying: Creating instance 'bosh/0': Creating VM: Creating vm with stemcell cid 'sc-XXXXXX': CPI 'create_vm' method responded with error: CmdError{"type":"Unknown","message":"Permission to perform this operation was denied.","ok_to_retry":false}
Deploying:
  Creating instance 'bosh/0':
    Creating VM:
      Creating vm with stemcell cid 'sc-XXXXXX':
        CPI 'create_vm' method responded with error: CmdError{"type":"Unknown","message":"Permission to perform this operation was denied.","ok_to_retry":false}
Exit code 1
===== 2026-05-05 11:50:50 UTC Finished "/usr/local/bin/bosh --no-color --non-interactive --tty create-env /var/tempest/workspaces/default/deployments/bosh.yml -l /var/tempest/workspaces/default/deployments/vars.yml --package-dir /var/vcap/packages"; Duration: 135s; Exit Status: 1

Environment

Operations Manager 3.2 

Operations Manager 3.3

vSphere Client Version 8.0.3

Cause

This error occurred due to insufficient permissions assigned to vSphere service account. 

Resolution

• Added the role - Upgrade Virtual Machine Compatibility in the current privileges of your vSphere service account in the vCenter administrator pane. 

 

• Once the role is updated , re-run the apply changes. 

Additional Information

vSphere service account requirements

https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/tanzu-operations-manager/3-3/tanzu-ops-manager/vsphere-vsphere-service-account.html