2 Replies Latest reply: Jan 3, 2017 2:05 AM by Rick van Vliet RSS

    vCenter permissions when using the plugin

    Rick van Vliet Adventurer

      In our company we have lots of Engineers that are responsible for customer VM's and this involves creating and growing datastores in which the Nimble plugin comes in great.

       

      We did have an issue when limiting permissions in vCenter, after setting the correct permissions in vCenter I was able to manually create and expand datastores but when trying this with the Nimble plugin it just returned an error saying "No Permission()" without any kind of error code.

      image.png

       

      The lack of a proper error code was a bit frustrating as it gives you no lead into a direction into which to search.

      As a user with Administrative permissions there was no problem and as said before I could manually to all the steps needed to grow or create datastores. So it seemed that the Nimble plugin does something extra.

       

      After talking to Support about this we came to the conclusion that the best way to troubleshoot was to give all permissions an remove them until it breaks, which would be very time consuming but if it would solve the problem it's the best option.

       

      I eventually found the "holy checkbox", the Tasks permission, it appears that when a datastore operation is initiated from the Nimble plugin this is done via a task, as I started my initial role within vCenter as a copy of the power user role this permission was not set. After setting the "create tasks permission it all came to life:

      Screen Shot 2017-01-02 at 12.57.35.png

      After setting only this permission and trying to grow a datastore I was getting some nice error messages from vCenter which helps to set the rest of the permissions needed for engineers.

      image (1).png

       

      As the need for the "Tasks" permissions is not really documented in the Nimble Documentation I can imaging others out there are searching for this, and I would post it here hoping it will help someone along the way.

        • Re: vCenter permissions when using the plugin
          Moshe Blumberg Adventurer

          Hi Rick, thank you very much for outlining this requirement, I'm sure it will help for any future considerations and plugin usage.

          As a side note, when reviewing the VMware integration guide the plugin page, first not outline the permissions needed:

           

          Nimble Storage InfoSight

           

          The following privileges are required for using the vCenter plugin.

          • Datastore.AllocateSpace
          • Datastore.Config
          • Datastore.Delete
          • Datastore.Move
          • Datastore.Rename
          • Extension.Register
          • Extension.Unregister
          • Extension.Update
          • Global.CancelTask
          • Host.Config.AdvancedConfig
          • Host.Config.NetService
          • Host.Config.Settings
          • Host.Config.Storage
          • StoragePod.Config
          • System.Anonymous
          • System.Read
          • System.View
          • Task.Create
          • Task.Update

           

           

          As for the error code, I've created a bug to detail the permission failure in the error code.

          Thanks,

          Moshe.

            • Re: vCenter permissions when using the plugin
              Rick van Vliet Adventurer

              Hi Moshe,

               

              Thanks for you reply, this was actually the information I was looking for when opening the support ticket (which actually stated "Is there a guide for setting permissions within vCenter to give some users permission to grow volumes/datastores?", but I didn't get a reference back to this document after which I started my journey of finding the correct permissions myself.

               

              Thanks,

               

              Rick