Alerts for objects outside of scoped Custom Group are visible in VMware Aria Operations

Products

• VCF Operations

Issue/Introduction

• Users assigned to a custom role and limited to a specific Custom Group see alerts for objects that are not part of their assigned scope.
• This occurs even when the "Allow All Object Access" flag is disabled in the role assignment.
• Users see alerts for ESXi hosts or other objects not included in their assigned Custom Group.
• Dashboards and reports correctly reflect the scoped objects, but the Alert View displays additional data.

Environment

VMware Aria Operations 8.18.x

Cause

This is an expected behavior as per design.

Resolution

Adapter instances and associated alert visibility for the user are expected by design, they will be included, since Aria Operations should be able to read and show collection status, and adapter instance is required for it. And it will only be visible for the objects for which the scope is selected.