Article number
000003949
Affected Versions
All
Source Hypervisor
All
Target Hypervisor
All

Managing Zerto with a vCenter account assigned to multiple roles

Viewed 342 times

Summary

Zerto uses the vCenter server specified during installation for authentication and to validate a user can access and manage components of the Zerto site.
Zerto uses the effective role assigned by vSphere/vCenter when validating the permissions the account has to manage the Zerto site. Depending on which role vSphere assigns, the effective role may not include the Zerto privileges needed to execute a task in the ZVM UI. 
  • The vCenter account used to log in to the ZVM UI is assigned to more than one role in the vCenter server that the ZVM is configured to use.
  • When attempting to execute a task in the ZVM UI, a customer may unexpectedly receive an error similar to:
You do not have the correct set of permissions for this task.
  • One of the roles assigned to the account used to log in to the ZVM UI has different Zerto privileges than the other role(s) assigned.

Steps

Review all the roles assigned to the account used to log in to the ZVM UI and verify each role is assigned the same Zerto privileges.
-or-
Remove any role with less or different Zerto privileges from the account used to log on to the ZVM UI.

For a list of Zerto privileges and their purpose, refer to the Zerto Permissions in vCenter Server section of the Zerto Virtual Manager Administration Guide - VMware vSphere Environments document on the Technical Documentation section of myZerto.