In MSP Deployment, Tenant Operator Guest File Restore for a Virtual Machine or Instance Fails with Error: "User does not have permissions on a valid restore destination."

In an MSP deployment, a member of the Tenant Operator group might receive a permissions error when trying to restore guest files to an access node (VSA proxy), or to a virtual machine or instance.

Symptoms

In an MSP deployment, a member of the tenant operators group might receive an error when trying to restore guest files to an access node (VSA proxy), or to a virtual machine or instance:

User does not have permissions on a valid restore destination.

Causes

This error occurs if the tenant operator does not have permissions for the machine that is specified as the destination for the restore.

Resolution

To resolve this issue, in the security associations for the access node (VSA proxy) or for the destination VM or instance, assign the VM End User role to the tenant operator or to the Tenant Operator user group.