Hi there!
I have the following problem:
- User1 is a member of Fabric Administratorsand Application Administrators (Self-service) user roles.
If User1 logs on to App Controller as Application Administrator (Self-service) he is able to deploy service or VM.
Here are job descriptions for VM and service deployments in AppController and SCVMM Jobs workspace:
VM: Create virtual machine (AppC) - succeeded / Create virtual machine in cloud (VMM) - succeeded
Service: Create service deployment (AppC) - succeeded / Create Service instance (VMM) - succeeded - User2 is a member of Application Administrators (Self-service) user role only.
If User2 logs on to App Controller as Application Administrator (Self-service) he is unable to deploy service or VM with the following error: The operation has timed out (StatusCode: Timeout). BUT in Library / Templates / Service Deployment Configuration container we are able to see the configuration with the settings which User2 configured.
Here are job descriptions for VM and service deployments in AppController and SCVMM Jobs workspace:
VM: Unassigned (AppC) - failed with error "The operation has timed out (StatusCode: Timeout)" / Create new VM deployment configuration (VMM) - succeeded
Service: Unassigned (AppC) - failed with error "The operation has timed out (StatusCode: Timeout)" / Create a new service configuration (VMM) - succeeded - If User1 is added to Administrator user role and tries to deploy the Service Deployment Configuration which was created by User2 the "Create Service Instance" job fails with error:
Warning (26733)
The user DOMAIN\User2 is not a member of the currently connected user role (Administrator) or a member of one of the child user roles of the currently connected user role.
Recommended Action
Please specify a user who is a member of the currently connected user role or someone in the role hierarchy and try the operation again. - If User2 attempts to use VMM console it becomes unresponsive.
I have the following questions:
- Is that how it is supposed to be?
- How to allow the self-service user be able to deploy a functional service?
Many thanks in advance!