All Apps Org | Tenant for First user shows blank though required permission has been granted.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

In VCF Automation 9.1.0, when creating a new simple "All Apps" tenant/organization and assigning the default Organization Administrator permission to the first user, the tenant portal fails to load services and shows a blank screen. 
Upon reviewing the HAR data or developer tools in browser, the system returns a 403 Forbidden error, indicating the user cannot list resources (like projects or supervisornamespaces) despite having the valid Org Admin role assigned.

Environment

VCF Automation 9.1.0

Cause

The issue is confirmed to be caused by missing rights bundles for the organization. Specifically, if someone renamed the original 'Default Tenant Rights Bundle', created a clone of it, and assigned it to a specific organization. Because the original default bundle was altered and restricted, newly created tenants were no longer receiving the necessary underlying permissions by default. Although the user could authenticate, this missing bundle resulted in a lack of permissions to list resources, triggering the 403 Forbidden errors.

Resolution

To fix the issue,

1. Navigate to the Provider Management portal (Access Control -> Rights Bundles).
2. You must correct the rights bundle assignments by ensuring that the 'Default Tenant Rights Bundle' is explicitly published either to all tenants globally or directly to the specifically affected organization, rectifying the issue caused by the cloned and renamed bundle.

The default value for 'Default Tenant Rights Bundle'