ACI EPG to vCenter PG integration issue

[asimonf1]

Hi,

I have managed to link ACI 6.0.3 with vCenter 7.0.3.
Integration works fine at Folder + DVS level.
VMM controllers are online and they retrieve all vPG and virtualized hosts and their vNIc, and all the ESXi nics..
The problem I am facing is with the EPG to PG alineation.
At ACI side we cannot get rid of following alarm:

Fault delegate: [FSM:FAILED]: Addition or Deletion of Port Group for: (uni/tn-ossinfra/ap-caas/epg-23010_backup_platform_10.73.229.128_25_0084) Tenant: ossinfra associated with either EPG:(Ap: caas Epg: 23010_backup_platform_10.73.229.128_25_0084) or Services:(LDevInst: EPpInfo: ) on VM Controller: esmalcasvvc001.prod.airtel.es VM Domain: ESMALCASVDS001-MGMT VM Provider: VMware, failed with error: addCustomFieldDef: SOAP FaultCode="":ServerFaultCode, FaultDetail=<NoPermissionFault xmlns="urn:vim25" xsi:type="NoPermission"><object type="Folder">group-d1</object><privilegeId>Global.ManageCustomFields</privilegeId></NoPermissionFault>, FaultString=Permission to perform this operation was denied.(TASK:ifc:vmmmgr:CompEpPDAddorDelExtPol)

At vCenter side, the tasks that are triggered by 'aciuser' fail because of following error:

And here am I..stuck..

I feel this is more related to privilege handling for 'aciuser' at vCenter side, but I am not sure.
Any hint welcome

BR/

[RedNectar]

Hi @asimonf1 ,

I think you probably answered your own question

---

I feel this is more related to privilege handling for 'aciuser' at vCenter side, but I am not sure.

 In vCenter, the 'aciuser' needs sufficient rights to add and delete vSwitches and Port Groups.

HOWEVER, you will also get an error in vCenter when you remove the VMM association from an EPG if there is one or more VMs with their NICs still linked to that PortGroup/EPG.

So if the 'aciuser' has sufficient privileges, go looking for VMs with a NIC still linked to the EPG named in the error (I can see the name in the picture, but not your text)