After upgrading or deploying the vCenter Server 6.0 or vCenter Server Appliance 6.0, you are unable to access some of the features in the vSphere Web Client:

• You are unable to access or see the Single Sign-On administration section
• When attempting to access the System Configuration (located at: Administration > System Configuration) section, you see:

You do not have permissions to view this page. You must be a m ember of the SystemConfiguration.Administrators group in vCenter Single Sign-On to access System Configuration.

• When attempting to access the Licensing administration (located at: Administration > Licensing > Licenses or Administration > Licensing > Reports) sections, you see:

To view and manage licenses, you must have the Global.Licenses privilege on the vCenter Server system where this vSphere Web Client runs.

To resolve this issue, assign permissions to the user attempting to access these new features:

• To access the Single Sign-On Administration Section
  1. Log in to the vSphere Web Client with the Administrator@vsphere.local
  2. Navigate to Administration > Single Sign-On > Users and Groups
  3. Under vCenter Users and Groups, select the Groups tab
  4. Locate the Administrators Group
  5. Under Group Members, click Add member () icon
     1. In the Add Principals window, select the appropriate domain for your user under the Domain drop-down
  6. Locate your user
     1. Note: At this time, only users can use these permissions. For more information, see Unable to administer vCenter Single Sign-On after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342).
  7. Click Add
  8. Click OK

Once completed, log out of the vSphere Web Client and log in with your user account. Confirm you are able to access the Users and Groups and Configuration sections under Single Sign-On.

• To access the System Configuration Section

Before you begin, ensure your user account has Single Sign-On Administration permissions.

1. Log in to the vSphere Web Client with your user account or with the Administrator@vsphere.local
2. Navigate to Administration > Single Sign-On > Users and Groups
3. Under vCenter Users and Groups, select the Groups tab
4. Locate the SystemConfiguration.Administrators Group
5. Under Group Members, click the Add member () icon
6. In the Add Principals window, select the appropriate domain for your user under the Domain drop-down
7. Locate your user.
   1. NoteUnderlined Text: At this time, only users can use these permissions. For more information, see Unable to administer vCenter Single Sign-On after adding a User Group and individual users from a Directory Service (OpenLDAP or Active Directory) (2095342).
8. Click Add
9. Click OK

Once completed, log out of the vSphere Web Client and log in with your user account. Confirm you are able to access the System Configuration section.

* To access the Licensing Section

Users can utilize the Administrator default role under Global Permissions to access the Licensing sections. This section details out how to create a custom role to only provide users with the Licensing sections.

1. Log in to the vSphere Web Client with the Administrator@vsphere.local
2. Create a Licensing Administration Role:
   • Navigate to Administration > Access Control > Roles
   • Click Create new role () icon
   • In the Create Role window, add a Role Name.
     • Note: For this article, we use Licensing Administration
   • Under the Privileges section, locate Global.
   • Expand Global and select Licenses. This will add a checkbox next to the Privileged.
   • Click OK to save and close the new role
3. Adding the Licensing Administration Role
   1. Navigate to Administration > Access Control > Global Permissions
   2. Click Add permission () icon
   3. In the Global Permissions Root - Add Permissions window, under Assigned Role, select Licensing Administration from the drop-down
   4. Under the Users and Groups section, click Add
   5. In the Select Users/Groups window, select the appropriate domain for your user under the Domain drop-down
   6. Locate your user or group
   7. Click Add
   8. Click OK

Once completed, log out of the vSphere Web Client and log in with your user account assigned the new role. Confirm you are able to access the Licenses and Reports sections under Licensing.