hello . i have had several times exactle the same problem
the error - "
I know the exact solution.
it is described in this article - VMware Knowledge Base
the solution is that :
you always need to give additional permision to your group or user, - you need to add your user\group to permission tab in object "vcenter"
and give the role "read-only".
even if you add your user to built-in group administrators you also need to add your user to vcenter object and assign "read-only" role withour
propagation.
let me give you one more example.
suppose you want to add administraor role for some particular VM for a user A.
you need to do two steps.
1. edit permission tab for VM and add user A with role "Administrator"
2. edit permission tab for vcenter object and give "read-only" role without propagation
if you dont do step 2 you cannnot even login to vcenter via user-A
one more. if you add user-B to built-in administrators (vsphere.local) group, such user will have almost administrator role.
you will get "you do not hold privilege "system > read" on folder "datacenters" " if you click Home - vcenter server setings.
To avoid this even for user-B you need to make step 2.
personally i think it is a very stupid thing but it is what it is.
hope it helps people.
