RecoverPoint with VMAX3: registering array fails with "Error: Operation failed ( There was an error while checking the RP compatibility of the array )"

Error when registering VMAX3 array:

Site1> register_storage
Enter RPA cluster name:
Site1

Select an array seen by the RPA at the specified cluster. To register an array or vCenter server that is not seen by the specified RPA cluster, scroll to the bottom of the list and select the last option.  Use the space bar to scroll down through the list. Type 'q' to stop scrolling and make a selection

     Type                   Serial Number                 Splitter

===================================================================================================================

1.   VMAX AF / VMAX3        000197200xxx
2.  Register an array or vCenter server that is not seen by this RPA cluster...

Select: 1
Enter storage name:
VMAX0xxx
Error: Operation failed ( There was an error while checking the RP compatibility of the array )
Site1>

Errors in storage logs on Site control RPA (extracted*/files/home/kos/storage/result.log.gz):
2018/09/11 17:17:59.059 - #1 - 3297/3076 - GKCmdDiscover::execute: the call to SymDiscover failed:Symmetrix access control denied the request
...
2018/09/11 17:17:59.060 - #1 - 3884/3076 - VMAX3ArrayHandler_AO_IMPL::handleDiscoveryFuture_i: The discovery has failed: [Symmetrix access control denied the request]
...
2018/09/11 17:17:59.060 - #1 - 22387/3076 - GKCmdCheckConnectionAndGetSerial::verifyRPCompatibility: the call to SymCapabilityList failed: The Symmetrix ID is not known for managedArraySerial = 000197200xxx
 

The VMAX3 array had ACL (Access Control List) enabled, and the RPAs did not have the correct permissions to discover the array

Resolution:

Enable correct ACLs for RecoverPoint to be able to discover and send commands for snapshots to the VMAX 3 array

RPAs will need the folllowing permissions on all devices on the array: 
BASE,BASECTRL,RPA,CREATEDV,CFGSYM 

This procedure can be used:
1. At the RecoverPoint CLI, run the following command:

get_access_ids_for_symmetrix

Sample output:

 get_access_ids_for_symmetrix site=Left
 Sites:
 Left:
 RPAs:
 RPA 1: 2C590BAF-53448CC1-9B3E707F
 RPA 2: 2C590BAF-5C428CCF-923E707F
 Access IDs for Symmetrix were retrieved successfully.

2. Use a text editor to create the following command file:

create accgroup RPAs;
add host accid <RPA1 Access ID> name RPA1 to accgroup RPAs;
add host accid <RPA2 Access ID> name RPA2 to accgroup RPAs;
grant access=BASE,BASECTRL,RPA,CREATEDV,CFGSYM to accgroup RPAs for ALL devs;

3. At the Symmetrix user interface, use the symacl command to grant access to the RPAs:

symacl  sid <Symmetrix ID> -file <command file name> commit
 

Please see Dell EMC RecoverPoint PowerMax and VMAX3/AF Technical Notes and EMC Solutions Enabler Array Controls and Management for HYPERMAX OS for more details.