Cloud Disaster Recovery Add-on (CDRA) fails to deploy

Oversigt: Cloud Disaster Recovery Add-on (CDRA) fails to deploy when a user is part of an organization with a Service Control Policies (SCP) configured.

Denne artikel gælder for Denne artikel gælder ikke for Denne artikel er ikke knyttet til et bestemt produkt. Det er ikke alle produktversioner, der er identificeret i denne artikel.
Udforsk andre ressourcer

Symptomer

Deployments which are using organizational SCP configured user-accounts have restrictions set that can prevent successful configuration of CDRA when it tries to query AWS and check for IAM policy permission or roles.

 

Årsag

As a result of restrictions configured from using an organization SCP enabled account, the deployment process fails when it tries to check for 'verifyRolePriviligesForActions' as seen below in log excerpt:

DEBUG [2020-07-16 18:04:33,463] [main] [CdrRole:verifyRolePrivilegesForActions:272]: verifyRolePrivilegesForActions for user DellEMC-cdr-dr-vmc-cdrs-user-01
ERROR [2020-07-16 18:04:33,605] [main] [CdrRole:verifyRolePrivilegesForActions:300]: Insufficient privileges.Missing Permissions for: s3:*, ec2:*, cloudwatch:*, cloudformation:*, rds:*, sqs:*, ses:SendEmail, ses:SendRawEmail, ses:Verify*.
ERROR [2020-07-16 18:04:33,605] [main] [CloudManager:init:280]: Insufficient privileges.Missing Permissions for: s3:*, ec2:*, cloudwatch:*, cloudformation:*, rds:*, sqs:*, ses:SendEmail, ses:SendRawEmail, ses:Verify*.
java.lang.RuntimeException: Insufficient privileges.Missing Permissions for: s3:*, ec2:*, cloudwatch:*, cloudformation:*, rds:*, sqs:*, ses:SendEmail, ses:SendRawEmail, ses:Verify*.

 

Løsning

As a workaround, configure SCP account so that it does not restrict the role being used to deploy CDRS.

 

Berørte produkter

Avamar, PowerProtect Data Protection Appliance, Cloud Disaster Recovery, PowerProtect Software
Artikelegenskaber
Artikelnummer: 000183021
Artikeltype: Solution
Senest ændret: 08 maj 2026
Version:  7
Find svar på dine spørgsmål fra andre Dell-brugere
Supportservices
Kontrollér, om din enhed er dækket af supportservices.