Troubleshooting issues with mapping multiple users in vCenter


This topic describes how to troubleshoot the issue that you encounter when working with multiuser mapping for managing vCenters.


Issue

Workaround

The error Could not find automation principal with ID '2' occurs when attempting to browse the vCenter server using a mapped Automation Principal that lacks the necessary access permissions.

As an RBACAdmin, provide read permission to the mapped Automation Principal for the specified roles and the vCenter server.

When you attempt to browse the vCenter, the error appears:

Failed to establish connection either because of invalid web service details or web service is down. Check logs for further details. : on host <VCName> and proxy host <ProxyServerName>
  • If no Automation Principal is mapped to the requested vCenter server and role.
  • If the Connection Property Set Instance for the vCenter server has blank or non-configured credentials



As an RBACAdmin, perform one of the following tasks:

  • Map the automation principal to the specific role and the vCenter.
  • Configure the vCenter user connection details in Connection Property Set Instance.

The following error appears when you try to browse vCenter with a non BLAdmins role.

Access Denied Role.Read on <Role_name>


As an RBACAdmin, provide read permission to non BLAdmins role.

The error No access allowed for Property: VIRTUAL_ENTITY_CONNECTION appears in the following situations:

  • A user with a non-BLAdmins role tries to browse the vCenter server without permissions for the PropertyInstance and without an Automation Principal mapped to the specified role and vCenter server.
  • The Automation Principal is not mapped to the requested vCenter server and TrueSight Server Automation role. In this case, the system attempts to retrieve credentials from the Property Set Instance's connection property, but an error arises if the requested role lacks permission to access it.

As an RBACAdmin, perform the following steps:

  1. On the Configuration page, click Property Dictionary View.
  2. Expand Built-in Property Classes and select Connection Property.
  3. In the Instances section, click Connection for the specified vCenter server.
  4. In the Permissions section, provide the PropertyInstance permission for the specified role.
  5. Click OK.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

TrueSight Server Automation 26.1