Unable to perform operations such as create and protect VMs.

Problem

When attempting to perform operations such as create and protect VMs, you might see an error similar to the following: 
Permission Denied: Set up your enterprise federation with VMware Cloud Services or ensure that the VMware Cloud user has necessary privileges in VMwareID domain of the vCenter.

Cause

This issue occurs when a VMware Cloud user does not have the required privilege in the vCenter or enterprise federation is not set for your domain.

Solution

  1. For vCenter versions 8. 0 Update 2 and earlier, ensure that the Active Directory (AD) that contains the vCenter roles and privileges is federated with VMware Cloud. See the Setting Up Enterprise Federation with VMware Cloud Services guide.
  2. For vCenter8.0 Update 2 and later, you can either use VMwareID as your authentication to VMware Cloud or setup enterprise federation with VMware Cloud. See Add VMware ID users to vCenter Administrators Group.