Add Role is failed

[as900w]

I want to create a custom role.

Open VMware Web Client, navigate to mange > Security & Users > Roles.

Then click Add role.

I want the role only can change the VM configure（For Example, Change the VM Memory.）

So, I only select VirtualMachine > Config

Then Click Add.

But, it's failed

What should I do?

[SupreetK]

1) What is the vCenter version?

2) To confirm, you are using the vCenter Web Client and not the host client right? The reason I'm asking this question is when you try to create a new role in the vCenter, it says 'Create Role'. In the host client, it says 'Add a role'. Here, you are using the Web client and the heading says 'Add a role'.

3) Also, there is no Manage --> Security and Users tab in the Web Client. It is there in the host client.

4) If using the host client, share the ESXi host version and the host client version.

Cheers,

Supreet

[Devi94]

To Create a role go to administration -> Access control -> roles -> create role

[as900w]

I am using the host client.

The ESXi version is 6.5

[as900w]

I am direct access ESXi host.

Not vCenter Server

[vijayrana968]

Update the embedded host client to latest, ESXi Embedded Host Client

[diegodco31]

I recommend update of the  host client.

ESXi Embedded Host Client

Step to step:

HOW TO: Install ESXi Embedded Host Client

You will have:

1 - Copy vib to datastore

2 - esxcli software vib install -v /vmfs/volumes/<StoreName>/<FolderName>

Please consider marking this answer "correct" or "helpful" if you think your question have been answered correctly.

[SupreetK]

I don't think this is an issue with the version of the host client. I was able to add the same role on the same version of ESXi host and the host client in my lab. Can you try to re-add the role, note down the exact time stamp and share the hostd.log file from the host?

Cheers,

Supreet

[as900w]

[SupreetK]

Can you try to re-add the role, note down the exact time stamp and share the hostd.log file from the host?

Cheers,

Supreet

[as900w]

I don't have find the same time log in hostd.log file.

How download hostd.log?

[Devi94]

you see an error group lookup itpro\esxadmins failed ? is that the same group you are trying to add ?

[SupreetK]

You can either generate the complete log bundle, extract it on your system and locate the hostd.log file under var/run/log or connect to the host using WinSCP application, navigate to var/run/log and copy the hostd.log file to your system.

Cheers,

Supreet

[as900w]

I am direct connection to ESXi.

The user name is Root

itpro.local is  domain name of my vCenter Server

I only is create role.

Don't granting user.

[as900w]

I has been copy the hostd.log file under var/run/log.

How uploading it.

I don't find log of today.

I don't have find the same time log in hostd.log file.

[Devi94]

Are you able to create role with different permissions ?  i tried to reproduce your issue in my lab, but i am not facing any issue. i can able to create role successfully.

[SupreetK]

The time stamp in the hostd.log will be in UTC time zone. I will validate the time stamp, no worries. You can attach the file from your comments box -

Cheers,

Supreet

[as900w]

This is log file.

Thanks.

I am local time is  beijing time

[as900w]

I can't to create role with different permissions

[as900w]

This is ESXi 6.5 issue.

I using ESXi 6.7 is OK.