Azure VMware Solution
An Azure service that runs native VMware workloads on Azure.
360 questions
Azure ARC onboarding VMware Vsphere insufficient privileges error
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 68%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
Jimcobber
0
Reputation points
When I try to onboard a vsphere server to ARC I get insufficient privileges error. The account I'm using is the administrator account, and it should have all the privs needed. Any ideas?
Please enter appliance VM control plane IP: 192.168.15.64
Do you want to configure the appliance VM proxy settings? (y/n) n
All configuration files created successfully
Appliance Configuration YAML was created here: C:\utils\AzureUpdateManager-appliance.yaml
Resource Configuration YAML was created here: C:\utils\AzureUpdateManager-resource.yaml
Infrastructure Configuration YAML was created here: C:\utils\AzureUpdateManager-infra.yaml
Starting validate
Validating the appliance configuration...
{"file":"D:/a/1/s/pkg/appliance/client.go:326","func":"prepForKVA","level":"info","msg":"Running validation for command: ArcApplianceValidate","time":"2023-12-12T12:47:39-05:00"}
Initializing chart values for provider: vsphere 2023-12-12T12:47:39-05:00 INFO Performing provider validations
2023-12-12T12:47:39-05:00 INFO vsphereProvider: Validate
2023-12-12T12:47:39-05:00 INFO Client Created with vcenter url: sd-vsphere.kaufcan.com
2023-12-12T12:47:40-05:00 INFO Testing vCenter compatibility
2023-12-12T12:47:40-05:00 INFO Testing existence of vCenter entities and paths
2023-12-12T12:47:40-05:00 INFO Testing requested network configuration
2023-12-12T12:47:40-05:00 INFO Testing permissions and entity privileges
2023-12-12T12:47:40-05:00 INFO Testing permissions and entity privileges /
2023-12-12T12:47:40-05:00 INFO Testing permissions and entity privileges /Datacenter SD/vm/vCLS
2023-12-12T12:47:40-05:00 WARN Privilege=Folder.Create is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.AddExistingDisk is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.AddNewDisk is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.AddRemoveDevice is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.AdvancedConfig is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.Annotation is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.CPUCount is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.ChangeTracking is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.DiskExtend is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.DiskLease is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.EditDevice is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.ManagedBy is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.Memory is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.MksControl is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.QueryFTCompatibility is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.QueryUnownedFiles is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.ReloadFromPath is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.RemoveDisk is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.Rename is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.ResetGuestInfo is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.Resource is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.ToggleForkParent is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Config.UpgradeVirtualHardware is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Interact.DeviceConnection is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Interact.GuestControl is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Interact.PowerOn is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Interact.Reset is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Interact.Suspend is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Interact.ToolsInstall is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Inventory.CreateFromExisting is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Inventory.Create is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Inventory.Register is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.GuestOperations.Modify is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.GuestOperations.ModifyAliases is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Provisioning.Clone is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Provisioning.DeployTemplate is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Provisioning.DiskRandomAccess is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Provisioning.DiskRandomRead is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Provisioning.FileRandomAccess is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Provisioning.GetVmFiles is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Provisioning.MarkAsTemplate is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Provisioning.MarkAsVM is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.Provisioning.PutVmFiles is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.State.CreateSnapshot is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.State.RemoveSnapshot is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VirtualMachine.State.RevertToSnapshot is missing on Folder:group-v79 resource
2023-12-12T12:47:40-05:00 WARN Privilege=VApp.Import is missing on Folder:group-v79 resource
{"file":"D:/a/1/s/pkg/appliance/client.go:170","func":"Validate","level":"error","msg":"Error details, Provider: vsphere, Command: Validate, Msg: Error while validating via kva, ErrorCode: ValidateKvaError, Error: {\n "code": "InsufficientPrivilegesError",\n "message": "The specified resource 'Folder:group-v79' does not have required privileges"\n }","time":"2023-12-12T12:47:40-05:00"}
{
"errorCode": "InsufficientPrivilegesError",
"errorResponse": "{\n"message": "The specified resource 'Folder:group-v79' does not have required privileges"\n}"
}
Script execution failed with error: Appliance creation has failed.
Please reach out to arc-vmware-feedback@microsoft.com or create a support ticket for Arc enabled VMware vSphere in Azure portal.
{count} votes
-
vipullag-MSFT 26,391 Reputation points2023-12-13T00:50:18.56+00:00 Hello Jimcobber
This issue needs deeper investigation. Support team will be able to check and help on this. I would recommend you to open a azure support case.
If you don't have a support plan enabled on your subscription, I request you to send an email to AzCommunity@Microsoft.com with Subject as "Attn:Vikas" referencing this thread along with your subscription ID. I can then enable your subscription with a one-time free technical support.
Once the issue is resolved, request you to post the resolution here for the benefit of community.
Sign in to comment
Sign in to answer