"Required implied right has not been selected for the selected right" Alert flagged in VMware Cloud Director Role
search cancel

"Required implied right has not been selected for the selected right" Alert flagged in VMware Cloud Director Role

book

Article ID: 447783

calendar_today

Updated On:

Products

VMware Cloud Director

Issue/Introduction

  • Navigating to VCD provider portal > Administrator > Access Control > Roles > viewing  specific role, flags the following error : "Required implied right <Component>:<Implied-Granular-view-level-Right> has not been selected for the selected right <Component>:<Implying-view-level-Right>"
  • Upon editing the Role, navigating to the specific <Component> section flagged in the Alert : Expand the rights list, it is validated that the checkbox against, <Implying-view-level-Right>, is selected, however the check box against the <Implied-Granular-view-level-Right> remains unselected.
  • Discrepancy / Incorrect values seen for configured parameters such as Memory Reservation Guarantee on the VCD provider portal when viewing using users with different roles. 

Environment

  • VMware Cloud Directory 10.6.x

Cause

  • Issue caused due to introduction of newer granular view rights for users, with VCD 10.6.x and the roles having been created and applied at an earlier version. 
  • These granular rights are ideally expected to be selected by default, by implication, with the selection of certain major permissive rights, however, were failed to be applied.

Resolution

  • Log into the VCD provider portal as admin.
  • Navigate to Administrator > Provider Access Control > Roles : Specific Role assigned to the user observing the discrepant values : Edit.
  • Navigate to the specific <Component> section flagged in the Alert : Expand the rights list.
  • Deselect and then Reselect the check box pertaining to the <Implying-view-level-Right> from the flagged alert.
    • Validate that now the check box against the <Implied-Granular-view-level-Right> is automatically selected.
  • Follow the same until no more alerts are flagged atop the role. 
  • Save the Roles.
  • Refresh the browser and validate by logging in using the impacted user.