VMware Support Community
mmangold
Enthusiast
Enthusiast

Skyline Log Assist Insufficient Privileges

Greetings all. Still having difficulties getting Log Assist to recognize sufficient privileges for the feature to be enabled. This week even freshly deployed a v2.7 collector and linked to vROps, during which process deleted the former service account and started with a freshly cloned role and then added all privileges required in KB (https://kb.vmware.com/s/article/59661) (including the Cryptographic options since this is on a vSAN (encrypted) stretched cluster).

Any ideas on whats missing here? Attaching images for clarity.

2021-02-26_skyline-insuff-privs.png2021-02-26_skyline-privileges.png

--
MM
VI-Admin | vSphere | vSAN | Aria | Skyline Advisor Pro
Labels (3)
Reply
0 Kudos
4 Replies
TriveniS
VMware Employee
VMware Employee

Hi @mmangold 

Welcome to the Skyline Community!

As per the screenshot shared, I see that the “Storage views. View” privilege is not assigned to the skyline read-only role. Kindly assign the same and wait for a couple of hours for the collector status to update.
 
Also please check if this role is assigned to the skyline user at the vCenter permissions tab.

Refer the KB article: https://kb.vmware.com/s/article/59661
 
Regards
Triveni Shanwad 
VMware Support Moderator
Reply
0 Kudos
mmangold
Enthusiast
Enthusiast

thank you for your reply. i noticed that privilege was missing just a bit ago and have added it. also, usage was defined at the datacenter level, rather than the vcenter level, so that has been adjusted, as well. i didnt realize it was going to take so long to reflect the changes, as skyline-advisor was showing successful updates every twenty minutes or so- id restarted the collectors and went back to see if the 'insufficient privileges' notice had gone away, but it had not. ill check again in a few hours as has been suggested. will update with status upon confirmation; thanks again.

--
MM
VI-Admin | vSphere | vSAN | Aria | Skyline Advisor Pro
Reply
0 Kudos
TriveniS
VMware Employee
VMware Employee

Hi @mmangold 

Thank you for the update.

Please find the steps below to manually re-validate account permissions.

 
Go to the Log assist tab and select any random SR,
Click next
Click on the re-validate button
Re-validation takes about 5-10 min to complete and update the status on Advisor.
 
Regards
Triveni Shanwad 
VMware Support Moderator
Reply
0 Kudos
mmangold
Enthusiast
Enthusiast

Today the collector configuration no longer displays the 'insufficient privileges' message. Thank you for the assistance.

 

--
MM
VI-Admin | vSphere | vSAN | Aria | Skyline Advisor Pro
Reply
0 Kudos