====== Unable to access new Administration and Licensing features in the vSphere Web Client 6.0 ======



===== Symptoms =====

After upgrading or deploying the vCenter Server 6.0 or vCenter Server Appliance 6.0, you are unable to access some of the features in the vSphere Web Client:
  * You are unable to access or see the Single Sign-On administration section
  * When attempting to access the System Configuration (located at: **Administration** > **System Configuration**) section, you see:

''You do not have permissions to view this page. You must be a m
ember of the SystemConfiguration.Administrators group in vCenter Single Sign-On to access System Configuration.''

  * When attempting to access the Licensing administration (located at: **Administration** > **Licensing** > **Licenses or Administration** > **Licensing** > **Reports**) sections, you see:


''To view and manage licenses, you must have the Global.Licenses privilege on the vCenter Server system where this vSphere Web Client runs.''


===== Resolution =====

To resolve this issue, assign permissions to the user attempting to access these new features:
  * To access the **Single Sign-On** Administration Section
    -  Log in to the vSphere Web Client with the ''Administrator@vsphere.local'' 
    -  Navigate to **Administration** > **Single Sign-On** > **Users and Groups**
    -  Under vCenter **Users and Groups**, select the **Groups** tab
    -  Locate the **Administrators Group**
    -  Under **Group Members**, click **Add** member () icon
      - In the **Add Principals** window, select the appropriate domain for your user under the Domain drop-down
    -  Locate your user 
      -  ''Note: At this time, only users can use these permissions. For more information, see Unable to administer vCenter Single Sign-On after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342).''
    -  Click **Add**
    -  Click **OK**


Once completed, log out of the vSphere Web Client and log in with your user account. Confirm you are able to access the **Users and Groups** and **Configuration** sections under **Single Sign-On**.

  * To access the **System Configuration** Section
Before you begin, ensure your user account has **Single Sign-On Administration** permissions.
   - Log in to the **vSphere Web Client** with your user account or with the ''Administrator@vsphere.local'' 
   - Navigate to **Administration** > **Single Sign-On** > **Users and Groups**
   - Under vCenter **Users and Groups**, select the **Groups** tab
   - Locate the ''SystemConfiguration.Administrators Group''
   - Under **Group Members**, click the **Add** member () icon
   - In the **Add Principals** window, select the appropriate domain for your user under the Domain drop-down
   - Locate your user. 
    - **Note**__Underlined Text__: At this time, only users can use these permissions. For more information, see Unable to administer vCenter Single Sign-On after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342).
   - Click **Add**
   - Click **OK**
Once completed, log out of the vSphere Web Client and log in with your user account. Confirm you are able to access the **System Configuration** section.

 * To access the Licensing Section 

Users can utilize the ''Administrator'' default role under **Global Permissions** to access the **Licensing** sections. This section details out how to create a custom role to only provide users with the Licensing sections.

   - Log in to the vSphere Web Client with the ''Administrator@vsphere.local'' 
   - Create a **Licensing Administration Role**:
     * Navigate to **Administration** > **Access Control** > **Roles**
     * Click **Create new role** () icon
     * In the **Create Role** window, **add** a **Role Name**. 
       * **__Note__**: For this article, we use **Licensing Administration** 
     * Under the Privileges section, locate Global.
     * Expand Global and select Licenses. This will add a checkbox next to the Privileged.
     * Click OK to save and close the new role
   - Adding the Licensing Administration Role
     - Navigate to Administration > Access Control > Global Permissions
     - Click Add permission () icon
     - In the Global Permissions Root - Add Permissions window, under Assigned Role, select Licensing Administration from the drop-down 
     - Under the Users and Groups section, click Add
     - In the Select Users/Groups window, select the appropriate domain for your user under the Domain drop-down
     - Locate your user or group
     - Click Add
     - Click OK
Once completed, log out of the vSphere Web Client and log in with your user account assigned the new role. Confirm you are able to access the Licenses and Reports sections under Licensing.