SRA: Failed to promote replica devices with error Unable to abort the ongoing transfers of the device as a part of failover

Applies to

• ONTAP tools for VMware vSphere(OTV)
• VMware Site Recovery Manager(SRM)
• VMware Storage Replication Adapter (SRA)
• ONTAP RBAC user

Issue

SRA failover fails with error:

Failed to promote replica devices. Failed to promote replica device '//SVM1/VOL1’. SRA command 'failover' failed for device '//SVM1/VOL1’. Unable to abort the ongoing transfers of the device as a part of failover.

Check the SRM logs for more details.

Logs:

vvolvp.log:

2024-06-07T09:40:25,262Z (INFO )[pool-3-thread-47] [] Establishing connection with username and password for cluster: 10.x.x.x

2024-06-07T09:40:25,262Z (INFO )[qtp652176954-51] [cxf-976292:public-interface:clusterAddBasic-153] Invoking zapiInvoker.invokeFilerBasedZapi() to get result for : <system-get-version/>

2024-06-07T09:40:25,262Z (DEBUG)[qtp652176954-51] [cxf-976292:public-interface:clusterAddBasic-153] Sending-3634034: <system-get-version/>

2024-06-07T09:40:25,263Z (INFO )[qtp652176954-51] [cxf-976292:public-interface:clusterAddBasic-153] Establishing connection with username and password for cluster: 10.x.x.x

2024-06-07T09:40:25,283Z (INFO )[pool-3-thread-47] [] received raw response.

2024-06-07T09:40:25,283Z (ERROR)[pool-3-thread-47] [] Sent 3634033 (and received error) to 10.x.x.x:SVM1<snapmirror-policy-get-iter><query><snapmirror-policy-info/></query><max-records>5000</max-records></snapmirror-policy-get-iter>

2024-06-07T09:40:25,283Z (ERROR)[pool-3-thread-47] [] NaException com.netapp.offtap3.ontap.ApiFailedException: Insufficient privileges: user 'domain\useraccount' does not have read access to this resource (errno=13003)

2024-06-07T09:40:25,283Z (DEBUG)[pool-3-thread-47] [] retryIfApplicable: message=com.netapp.offtap3.ontap.ApiFailedException: Insufficient privileges: user ‘domain\useraccount' does not have read access to this resource (errno=13003) nae=com.netapp.offtap3.ontap.ApiFailedException: Insufficient privileges: user ‘domain\useraccount' does not have read access to this resource (errno=13003) and isRecoverable=false and isVolumeBusy=false

2024-06-07T09:40:25,284Z (ERROR)[pool-3-thread-47] []         at com.netapp.offtap3.internal.ontap.dataloader.snapmirror.CModeSnapMirrorPolicyDataLoader.retrieve(CModeSnapMirrorPolicyDataLoader.java:80)

Zapi.log:

Role name:

2024-10-29T01:17:01,332Z [ControllerCluster1] DEBUG (ZAPI_LOGGER) - Sending-1360202: <security-login-role-get-iter><query><vserver>SVM1</vserver><role-name>ONTAPToolsforVMwarevSphereVSC_Discovery_Create_Modify_Destroy</role-name></query><max-records>1000</max-records><tag>&lt;security-login-role-get-iter-key-td&gt;