vRO update from 7.5 to 7.6 or higher removes simple Read-Rigths Consumer Role

90% of the time, VMware has updates that really bring value and give something to look forward to. The upgrade from vRO 7.5 to 7.6 however, does not. vRO has 3 roles, and the consumer role access in the bottom, is the one that gives user Read only rights. Unfortunately, after the upgrade this role is removed.

Afbeelding met tekst Automatisch gegenereerde beschrijving

Which results in the following roles:

Afbeelding met tekst Automatisch gegenereerde beschrijving

After this update, there are only 2 roles in the vRO client. While the workflow designer has more fine-grained roles than the Tenant Admin role that was before, only read options is not the option. Which can be a serious problem for organisations that for instance, needs to be PCI-Compliant. Unfortunately, this is what it is, and it is even not solved in version 8.2 of vRO. It seems that you now need to manage the roles with vRA, but I haven’t completely confirmed if it is also possible to use only the read roles on the vRO client.

Afbeelding met tekst Automatisch gegenereerde beschrijving

A simple and quick workaround for this problem, is forwarding the vRO logs to vRLI and give users read permissions on the vRLI environment. Log Insight doesn’t give that easy to view dashboard of vRO itself, but it does contain the same information with the logs if you use the right queries. Which can be a quick and temporarily solution for your users that only need read permissions to check if the workflow is running properly for troubleshooting.

To achieve that, I wrote a separate blogpost about it here.

Thanks for reading.


↑↑ Follow me on my Socialz ↑↑ - Or - ↓↓ Care & Share ↓↓

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.