topic Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties in Operating System - VMware

Insight Control for vCenter : You must have vcenter Administrator role to access properties

Handy — Tue, 22 Mar 2011 00:07:00 GMT

Hi,

I install ICVC on physical server and setup ILO,SIM,OA,VCmanager and vCenter administrator credential under https://localhost:50025.
I saw HP insight software plug-in under vCenter but i got this message when i access properties.

"you must have vcenter administrator role to access properties"

The account that i used have vcenter admin role. any specific privilege should i used? do you have any clue?

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

AlexPT_1 — Wed, 30 Mar 2011 16:47:26 GMT

Same here ;(

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

Handy — Thu, 31 Mar 2011 01:41:22 GMT

We solved this issue by create stand alone Vcenter administrator user. you don't use user attach to user group

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

Jeremy Bowman — Thu, 31 Mar 2011 12:50:06 GMT

Can you provide more specifics on how you fixed this? I have created a new Role in vCenter and a new group in AD containing the user connecting to Insight and my domain admin account - assigning this new AD group to the new role. (The new role has all the available privs assigned, including the HP storage etc).
Even with all this, I still get 'admin privs required' as you did originally. Any ideas?

Many thanks.
Jeremy.

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

AlexPT_1 — Thu, 31 Mar 2011 12:56:35 GMT

Hi, yes Handy, please could you elaborate? While we appreciate your reply it doesn't really, to me, seem to be obvious what you've done.

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

AlexPT_1 — Thu, 31 Mar 2011 13:06:35 GMT

Aha! I see what our friend means now.

Create a local user called X (vCenter or whatever, not really relevant). Then in vCenter at the vCenter level (if you wish) go to Permissions. Now add the local user account as an administrator in vCenter. Now quit and log back in with the newly created account. Whoalla!

Worked for me.

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

Handy — Thu, 31 Mar 2011 13:21:19 GMT

1. I have vCenter user called "hpadmin". I put this user under "cusadmin" group with admin permission.

2. I create vCenter user "hpadmin" and give admin permission.

I have the issue if i use first way.

Please suppport with point if this solution help you

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

Jeremy Bowman — Thu, 31 Mar 2011 13:45:59 GMT

Hi,

Thanks for your thoughts.... Here's where I am now.

1) Created new local account in Windows on VC, member of local admins group.

2) Created a new role in VC with god (all) privs, and add the new local user to this role.

3) Restart vClient.

4) Still getting the permissions error.

Grrrr. Any further thoughts?

Cheers.
Jeremy.

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

Handy — Thu, 31 Mar 2011 13:53:40 GMT

i assume your account name is "hpadmin". you should see hpadmin account created like attach picture

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

Jeremy Bowman — Thu, 31 Mar 2011 14:20:15 GMT

Ah yes, that worked! Now all I need to do is to get the permissioning working so all the 'admin' staff from an AD group can get the same access.

I tried creating a new local group and adding the user (from above) and the AD admins group then adding that with administrator permissions - no go.

Did you try this or was it outside your requirements?

Cheers.
Jeremy.

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

AlexPT_1 — Thu, 31 Mar 2011 14:23:54 GMT

You shouldn't need to give it local (Windows) admin permissions. That's kinda what we're trying to avoid here, least to me.

Remove the Administrators local group from your local user account. The issue seems to be where it gets admin rights from.

The suggestion to call it "HPAdmin" is irrelevant BTW. Could be called MonkeyNuts for all the system cares.

Re: Insight Control for vCenter : You must have vcenter Administrator role to access properties

AlexPT_1 — Thu, 31 Mar 2011 14:24:19 GMT

Oh and a vCenter restart isn't necessary.