NVP-vProxy: VM Backup Fails Error "VDDK Error: 3014: Insufficient permissions in the host operating system"
Summary: NetWorker VMware Protection (NVP) Virtual Machine (VM) backups fail with "VDDK Error: 3014: Insufficient permissions in the host operating system."
Symptoms
The following error is observed in the VM backup session log.
YYYY/MM/DD HH:MM:SS TRACE: Attempting to disable storage migration of virtual machine "vm-85" ...
YYYY/MM/DD HH:MM:SS ERROR: Failed to disable storage migration for virtual machine "VDDK Error: 3014: Insufficient permissions in the host operating system.": %!v(MISSING)
...
YYYY/MM/DD HH:MM:SS INFO: Enabling storage migration of virtual machine ...
YYYY/MM/DD HH:MM:SS ERROR: Failed to enable storage migration for virtual machine: "VDDK Error: 3014: Insufficient permissions in the host operating system.": %!v(MISSING)
VM backup logs are found under:
- NetWorker server:
- Linux:
/nsr/logs/policy/POLICY_NAME/WORKFLOW_NAME - Windows (Default):
C:\Program Files\EMC NetWorker\nsr\logs\policy\POLICY_NAME\WORKFLOW_NAMENOTE: The NetWorker server's policy logs follow thejobsdbretention (default 72 hours). After the retention period passes, the logs are removed. Backup logs on the vProxy appliance are not affected by thejobsdbretention.
- Linux:
- vProxy Appliance:
/opt/emc/vproxy/runtime/logs/recycle/vbackupd/DATE
Cause
The vProxy backup workflow disables storage migration for the virtual machine at the start of the backup and enables it once it completes. The configured VMware View (NSR Hypervisor) user role does not have sufficient permissions to either enable or disable storage migration.
Resolution
The required minimum user role permissions are documented in the "Minimum required vCenter user account privileges" section of the NetWorker VMware Integration Guide. NetWorker documentation is available through: Support for NetWorker | Manuals & Documents (You must sign in with your Dell support account).
Use the ProxyHC utility to identify missing permissions for the vCenter user account used by NetWorker:
The syntax to confirm permissions is:
./ProxyHC perm