vmware:vcenter6_grant_access

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
vmware:vcenter6_grant_access [2017/02/03 01:24]
admin created
vmware:vcenter6_grant_access [2017/02/09 11:12] (current)
admin
Line 6: Line 6:
  
 After upgrading or deploying the vCenter Server 6.0 or vCenter Server Appliance 6.0, you are unable to access some of the features in the vSphere Web Client: After upgrading or deploying the vCenter Server 6.0 or vCenter Server Appliance 6.0, you are unable to access some of the features in the vSphere Web Client:
-You are unable to access or see the Single Sign-On administration section +  * You are unable to access or see the Single Sign-On administration section 
-When attempting to access the System Configuration (located at: Administration > System Configuration) section, you see:+  ​* ​When attempting to access the System Configuration (located at: **Administration** **System Configuration**) section, you see:
  
-You do not have permissions to view this page. You must be a member ​of the SystemConfiguration.Administrators group in vCenter Single Sign-On to access System Configuration.+''​You do not have permissions to view this page. You must be a 
 +ember of the SystemConfiguration.Administrators group in vCenter Single Sign-On to access System Configuration.''​
  
-When attempting to access the Licensing administration (located at: Administration > Licensing > Licenses or Administration > Licensing > Reports) sections, you see:+  * When attempting to access the Licensing administration (located at: **Administration** **Licensing** **Licenses or Administration** **Licensing** **Reports**) sections, you see:
  
-To view and manage licenses, you must have the Global.Licenses privilege on the vCenter Server system where this vSphere Web Client runs. 
  
-===== Resolution =====+''​To view and manage licenses, you must have the Global.Licenses privilege on the vCenter Server system where this vSphere Web Client runs.''​
  
-To resolve this issue, assign permissions to the user attempting to access these new features: 
-To access the Single Sign-On Administration Section 
-Log in to the vSphere Web Client with the Administrator@vsphere.local ​ 
-Navigate to Administration > Single Sign-On > Users and Groups 
-Under vCenter Users and Groups, select the Groups tab 
-Locate the Administrators Group 
-Under Group Members, click Add member () icon 
-In the Add Principals window, select the appropriate domain for your user under the Domain drop-down 
-Locate your user 
  
-Note: At this time, only users can use these permissions. For more information,​ see Unable to administer vCenter Single Sign-On after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342).+===== Resolution =====
  
-Click Add +To resolve this issue, assign permissions to the user attempting to access these new features: 
-Click OK +  * To access the **Single Sign-On** Administration Section 
-Once completed, log out of the vSphere Web Client ​and log in with your user accountConfirm you are able to access the Users and Groups and Configuration sections ​under Single Sign-On. +    ​- ​ Log in to the vSphere Web Client with the ''​Administrator@vsphere.local''​  
-To access the System Configuration Section+    -  Navigate ​to **Administration** > **Single Sign-On** > **Users and Groups** 
 +    -  Under vCenter **Users ​and Groups**, select the **Groups** tab 
 +    -  Locate the **Administrators Group** 
 +    -  Under **Group Members**, click **Add** member () icon 
 +      - In the **Add Principals** window, select the appropriate domain for your user under the Domain drop-down 
 +    -  Locate your user  
 +      -  ''​Note:​ At this time, only users can use these permissions. For more information,​ see Unable to administer vCenter ​Single Sign-On ​after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342).''​ 
 +    ​- ​ Click **Add** 
 +    -  Click **OK**
  
-Before you begin, ensure your user account has Single Sign-On Administration permissions. 
-Log in to the vSphere Web Client with your user account or with the Administrator@vsphere.local ​ 
-Navigate to Administration > Single Sign-On > Users and Groups 
-Under vCenter Users and Groups, select the Groups tab 
-Locate the SystemConfiguration.Administrators Group 
-Under Group Members, click the Add member () icon 
-In the Add Principals window, select the appropriate domain for your user under the Domain drop-down 
-Locate your user.  
  
-Note: At this timeonly users can use these permissionsFor more information,​ see Unable ​to administer vCenter ​Single Sign-On ​after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342).+Once completedlog out of the vSphere Web Client and log in with your user accountConfirm you are able to access the **Users and Groups** and **Configuration** sections under **Single Sign-On**.
  
-Click Add +  * To access the **System Configuration** Section 
-Click OK +Before you begin, ensure your user account has **Single Sign-On Administration** permissions. 
-Once completed, log out of the vSphere Web Client and log in with your user account. Confirm you are able to access the System Configuration section. +   - Log in to the **vSphere Web Client** with your user account or with the ''​Administrator@vsphere.local''​  
-To access the Licensing Section ​+   - Navigate to **Administration** > **Single Sign-On** > **Users and Groups** 
 +   - Under vCenter **Users and Groups**, select the **Groups** tab 
 +   - Locate the ''​SystemConfiguration.Administrators Group''​ 
 +   - Under **Group Members**, click the **Add** member () icon 
 +   - In the **Add Principals** window, select the appropriate domain for your user under the Domain drop-down 
 +   - Locate your user.  
 +    - **Note**__Underlined Text__: At this time, only users can use these permissions. For more information,​ see Unable to administer vCenter Single Sign-On after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342). 
 +   ​- ​Click **Add** 
 +   - Click **OK** 
 +Once completed, log out of the vSphere Web Client and log in with your user account. Confirm you are able to access the **System Configuration** section.
  
-Users can utilize the Administrator default role under Global Permissions to access the Licensing ​sections. This section details out how to create a custom role to only provide users with the Licensing sections. + * To access the Licensing ​Section ​
-Log in to the vSphere Web Client with the Administrator@vsphere.local  +
-Create a Licensing Administration Role: +
-Navigate to Administration > Access Control > Roles +
-Click Create new role () icon +
-In the Create Role window, add a Role Name. +
  
-Note: For this article, we use Licensing ​Administration ​+Users can utilize the ''​Administrator''​ default role under **Global Permissions** to access the **Licensing** sections. This section details out how to create a custom role to only provide users with the Licensing sections.
  
-Under the Privileges section, locate Global. +   - Log in to the vSphere Web Client with the ''​Administrator@vsphere.local''​  
-Expand Global and select Licenses. This will add a checkbox next to the Privileged. +   - Create a **Licensing Administration Role**: 
-Click OK to save and close the new role +     * Navigate to **Administration** > **Access Control** > **Roles** 
-Adding the Licensing Administration Role +     * Click **Create new role** () icon 
-Navigate to Administration > Access Control > Global Permissions +     * In the **Create Role** window, **add** a **Role Name**.  
-Click Add permission () icon +       * **__Note__**:​ For this article, we use **Licensing Administration**  
-In the Global Permissions Root - Add Permissions window, under Assigned Role, select Licensing Administration from the drop-down  +     ​* ​Under the Privileges section, locate Global. 
-Under the Users and Groups section, click Add +     * Expand Global and select Licenses. This will add a checkbox next to the Privileged. 
-In the Select Users/​Groups window, select the appropriate domain for your user under the Domain drop-down +     * Click OK to save and close the new role 
-Locate your user or group +   - Adding the Licensing Administration Role 
-Click Add +     - Navigate to Administration > Access Control > Global Permissions 
-Click OK+     - Click Add permission () icon 
 +     - In the Global Permissions Root - Add Permissions window, under Assigned Role, select Licensing Administration from the drop-down  
 +     - Under the Users and Groups section, click Add 
 +     - In the Select Users/​Groups window, select the appropriate domain for your user under the Domain drop-down 
 +     - Locate your user or group 
 +     - Click Add 
 +     - Click OK
 Once completed, log out of the vSphere Web Client and log in with your user account assigned the new role. Confirm you are able to access the Licenses and Reports sections under Licensing. Once completed, log out of the vSphere Web Client and log in with your user account assigned the new role. Confirm you are able to access the Licenses and Reports sections under Licensing.
vmware/vcenter6_grant_access.1486081450.txt.gz · Last modified: 2017/02/03 01:24 by admin