Licenses synchronization fails with insufficient permissions in VCF Operations

Products

• VCF Operations

Issue/Introduction

• In VCF Operations 9.1.x, navigate to: Manage > License Registration > Licenses > a target vCenter(s). This will display a red banner in the user interface with the following errors:
  • Licenses could not be synchronized with vCenters.
  • Licenses could not be assigned to vCenters.
  When selecting the target vCenter, assign a license will display this error:

  Insufficient permissions to assign licenses to this vCenter. At least one of the configured credential types of VCF Operations must have the Global.Licence.priveleges assigned and must be a member of the LicenseService.Admisnistrators Single Sign-On group. Please refer to KB 424533 article for more information

• The logs in VCF Operations at logs / adapters / ManagementAdapter / ManagementAdapter show the exceptions:

  .... ERROR ManagementAdapter.... [ops@...... threadName="vcf-licensing-collection-####" instanceId="###"] [(####) com.vmware.adapter.management.components.licensing.vcf.collector.VCenterLicenseUsageCollector.validatePrivileges] - Configured vCenter user <Vcenter-iuser> is not member of LicenseService.Administrators or SSO Administrators groups
  
  .... ERROR ManagementAdapter ... [ops@...  threadName="vcf-licensing-collection-####" instanceId="###"] [(####) com.vmware.adapter.management.components.licensing.vcf.collector.VCenterLicenseUsageCollector.collect] - The configured User account for the VC endpoint <Vcenter-user> is missing the required permission. License collection will not be performed.

Environment

VCF Operations 9.1.x

Cause

The user account configured in the vCenter integration for VCF Operations lacks the necessary permissions required by the vCenter License Service. Specifically, the configured user must be a member of the LicenseService.Administrators group or the SSO Administrators group in vCenter Single Sign-On (SSO).

Resolution

To fix this problem ensure the user used in the affected vCenter adapter instance in VCF Operations has assigned the roles and privileges listed in this document below: Privileges Required for Configuring a vCenter Account.