Error Message

VCS ERROR V-16-1-11136
Command failed. User does not have any privileges in the cluster.

This message is seen when domain groups are incorrectly added to User Manager in the Cluster Manager Console.

Domain groups need to be added to the cluster differently than domain users.  After removing all domain groups from the User Manager section of Cluster Manager Console, perform the following to add the domain groups correctly.

1. Log into the cluster using Cluster Manager Console with an account that has Cluster Administrator rights.
2. Click on the the cluster name on the tree view on the left side of the Cluster Explorer window.
3. Click on the Properties tab on the right side of the Cluster Explorer window.
4. Click "Show all attributes" button.
5. Use group formats "DOMAIN\GROUPNAME@DOMAIN" and "GROUPNAME@DOMAIN" to one of the following attributes depending on the level of cluster access needed for the group.  Both group formats need to be added to ensure that proper permissions are assigned to both CLI and GUI access.
   1. For cluster administrator access use attribute:  AdministratorGroups
   2. For cluster operator access use attribute: OperatorGroups
   3. For cluster guest access (readonly) use attribute: GuestGroups.
6. Save and close the cluster configuration.

By default a secure cluster disables the default guest access for all domain users.  If you want to enable guest access for all domain users, set the DefaultGuestAccess attribute to true/checked.

Similarly if administrator/operation group access is needed at a specific service group level and not for the entire cluster, AdministratorGroups and OperatorGroups attributes are available at the individual service group level.  Use the same "DOMAIN\GROUPNAME" format at this level.

Cluster Manager Console fails to connect to a Secure Cluster when using domain groups