Unable to assign Global Permissions for custom role in vCenter

Products

• VCF Operations for Networks

Issue/Introduction

When attempting to enable Global Permissions for a custom role created within vCenter, the operation fails with a permission denied or internal error.

Environment

VMware ESXi

VMware vCenter Server

Cause

This issue occurs because the user account logged into the vCenter Server does not possess the necessary Administrator privileges required to assign global permissions. 

Resolution

To successfully assign global permissions, you must use an account with full administrative rights.

1. Identity the Administrator Account: Ensure you are using the cloudadmin account or the equivalent VSPHERE.local\Administrator credentials.
2. Perform the Assignment:
   • Log in to vCenter using the administrator account.
   • Navigate to Administration > Access Control > Global Permissions.
   • Select the custom role and assign the required user/group.