License sync in VCF Operations fails due to vCenter privilege error "You have no privileges to view this object"

Products

• VMware vCenter Server

Issue/Introduction

In VMware Cloud Foundation (VCF) Operations and vSphere environments, administrative accounts (such as [email protected] or custom SSO domain admins like [email protected]) experience permission failures when accessing Single Sign-On (SSO) configuration screens or synchronizing vCenter Server licenses.

• vSphere Client GUI: Logging into the vSphere Client and navigating to Administration > Single Sign-On > Identity Providers or Users and Groups fails with the error: You have no privileges to view this object

• VCF Operations UI & Logs: Licensing sync fails under Manage > Licensing > Licenses & Registration with the message Licenses could not be synchronized with the vCenter systems.

/storage/log/vcops/log/adapters/ManagementAdapter/ManagementAdapter_##.log: 

[com.vmware.adapter.management.components.licensing.vcf.collector.VCenterLicenseUsageCollector.collect] - The configured User account for the VC endpoint is missing the required permission Global.Licenses. License collection will not be performed.

Environment

• VMware Cloud Foundation (VCF) Operations 9.1
• vCenter Server 8.0 and later

Cause

The administrative account ([email protected]) is missing membership in built-in Single Sign-On (SSO) groups ( For example: Administrators, SystemConfiguration.Administrators, and LicenseService.Administrators). This restricts administrative scope, revoking Global.Licenses permissions in vCenter and blocking access to SSO configuration views.

Resolution

For further assistance with this issue, please reach out to Broadcom Support.