Strange Password requirements

HI,

I think here it is in documentation, doable in the GUI :
https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.psc.doc/GUID-B9C4409A-B053-40C3-96DE-232BB99AAA35.html

Home / Administration
Under Single Sign / Configuration / Policies / Password Policy / Edit

Not sure why they are all set to 0?


I have the Administrator role assigned to my SSO account, but when i go to
  /Single Sign On / Configuration /

I get the message,,
   You have no privileges to view this object or it does not exist.

Not sure why they are all set to 0?

I suppose somebody disable it for a reason, wanting no expiry policy, or simplier passwords

You have no privileges to view this object or it does not exist

wow, this is weird ! you mean your account is part of administrator group in vsphere.local (or whatever is your SSO domain) ?

Look at here, that's what I get from a quick search ; known issue, or at least you are not the only one :
https://kb.vmware.com/s/article/2125229
https://communities.vmware.com/thread/507933

The links seem to point to vSphere 6.0 issue.
This s is 6.7.

At the vCEnter level, I have the Administrator Role assigned to my name

User/Group                      Role                               Defined In      
vsphere.local\stan          Administrator                 This object and its children

Some Admin users have "Global Permission" under the "Defined In" column vs "This object and its children"

I think you don't have the right permissions to access : you have administrator role at vsphere/vcenter level, but not SSO
vsphere level is in this menu : Administration / access control / global permission
SSO level : Administration / SSO / Users and groups

Or test with administrator@vsphere.local if you have it, you will be sure to have full rights

I logged in as administrator made the change and now see the below,,

User/Group                      Role                               Defined In      
vsphere.local\stan          Administrator                 Global Permission

However, when I login as Stan and  go to
  /Single Sign On / Configuration /

I get the message,,
   You have no privileges to view this object or it does not exist.

I think you miss something.....

I made the same changes here in my lab on a vsphere 6.7 with a new user and it is working like a charm!

So again, to add an AD user as an SSO admin :
Administration / SSO / Users and groups / Groups tab / Administrators / add member / select domain and user / OK / that's all

On this particualr set up, there is no AD.  I am using vsphere.local
Attached are a few screens showing me as an Admin, but not having access.

vc.pdf

hi,
well, it is almost the same!
To add a SSO user as an SSO admin :
Administration / SSO / Users and groups / Groups tab / Administrators / add member / select SSO domain and user / OK / that's all

carefully re-read my answers please, and which menu to go through

I followed the answer,,
I do not see "Add Member",
If i click on Administrators, i see Edit and Delete group.

See attached
admin.pdf

Hi,
just click on the group name, this is a link