Re: Permission Denied on Domain Controller on Internal LoadBalancer

[Ricardo Pertuz]

Thanks Wei for replying, the caller has the role Domain Admin, so we guess it 
should be able to execute it

On 27/07/22, 9:15 AM, "Wei ZHOU" <ustcweiz...@gmail.com> wrote:

    Hi Ricardo,

    Please check if the caller is the owner of the network, or the caller can
    access the network if it belongs to a project.

    -Wei

    On Tue, 26 Jul 2022 at 23:16, Ricardo Pertuz <ricardo.per...@kuasar.co>
    wrote:

    > Hi all,
    >
    > We use a domain controller  user in ACS  to deploy the infrastructure,
    > however when we try to CreateLoadBalancer we are receiving a “531 Unable 
to
    > use network with id= 498611f9-xxx-4030-aa10-e7d7ad062d1a, permission 
denied”
    >
    > PermissionDenied: Unable to use network with id=
    > 498611f9-xxx-4030-aa10-e7d7ad062d1a, permission denied on objs: []
    >
    > Is there any configuration missing or is it a bug? It works well when
    > using the admin user.
    >
    > ACS 4.15.2.0
    > KVM
    > Redundant VPC offering
    >
    > Supported Services on Network Offering
    > SourceNat : VpcVirtualRouter
    > Dhcp : VpcVirtualRouter
    > Lb : InternalLbVm
    > UserData : VpcVirtualRouter
    > Dns : VpcVirtualRouter
    > NetworkACL : VpcVirtualRouter
    >
    > BR,
    >
    > Ricardo
    >
    >
    >
    >