Symptoms
You are backing up VMs with the NetWorker VMware Protection (NVP) vProxy appliance.All Hot add VM backups fail with the following error:
Failed to backup virtual disk "Hard disk 1". Failed to initialize Block Reader. Failed to open source VMDK '[DATASTORE] UUID/VM_NAME.vmdk': VDDK Error: 13: You do not have access rights to this file.
Cause
The vCenter account used to add the vCenter to NetWorker is missing required permissions. For example if you run the ProxyHC utility it reports:
INFO Checking vCenter user permissions
INFO -------> Using: DOMAIN\vCenter_User
INFO -------> Found role ID: -########
ERROR -------> Failed to validate privileges. Missing privileges:
['VirtualMachine.Provisioning.GetVmFiles']
Resolution
Download the ProxyHC utility and check for missing permissions: NVP-vProxy: How to use health check tool ProxyHC on vProxy appliance
./ProxyHC perm
The vCenter administrator must correct any permission issues that are reported.
Permissions required should be listed in the ProxyHC /tmp/proxy-hc.log.The NetWorker VMware Integration Guide also details the permissions required by the vCenter user account used with NetWorker, see: https://www.dell.com/support/home/product-support/product/networker/docs
NOTE: The vCenter account used by NetWorker must have permissions assigned on the vCenter (root) object. Ensure that the user does not belong to any groups which have restricted permissions on another (lower level) object in VMware (for example, the Datacenter). This can lead to the issue outlined in NVP vProxy: Image Restore Fails "ServerFaultCode: Permission to perform this operation was denied.".
