Search the VMware Knowledge Base (KB)
View by Article ID

Error: “Failed to deploy OVF package” in the vCenter Server when deploying OVA/OVF template (2105932)

  • 22 Ratings


  • Unable to deploy an OVA/OVF template within vCenter Server
  • Deploying the template with a user that does not have full administrative rights within vCenter Server
  • You see the error:

    Failed to deploy OVF package: Permission to perform this operation was denied.


This article provides the minimum privileges required for a user in vCenter Server to deploy an OVA/OVF template.

You may have to do this if:
  • You have to deploy a third-party virtual appliance.
  • You have to deploy a VMware vApp or virtual appliance.


This issue can occur when the user deploying the OVA/OVF template does not have the minimum vCenter Server privileges required to deploy the template.


To set the minimum vCenter Server privileges required to deploy a OVF/OVA template:
  1. Using the vSphere Client, log in to vCenter Server as an administrator.
  2. Click Home > Roles.
  3. Select an administrator role.
  4. Right-click the role from Step 3 and click Clone.
  5. Rename the role. For example, deploy OVF/OVF Template.
  6. Select the role you just cloned, right-click and then click Edit Role.
  7. Remove all unnecessary privileges by deselecting the boxes, and keep these minimum privileges:
    • All Privileges > Datastore > Allocate space
    • All Privileges > Network > Assign network
    • All Privileges > Virtual machine > Configuration > Add new disk 
    • All Privileges > Virtual machine > Configuration > Advanced
    • All Privileges > vApp > Import
The a
bove permission are set for deploying OVA/OVF templates only and the user with the above privileges will not be able to perform any other activity unless other permissions are provided to the role assigned to the user. This information is useful for environments where deploying an OVF/OVA template is a task which can be performed by a user, without requiring Administrative privileges to the vCenter Server.
  1. Add permissions for the user assigning the newly created role at the vCenter Server level.

    1. Select the top level for vCenter Server, then click the Permissions tab.
    2. Right-click and click Add Permission.
    3. Click Add and select the user or group to add the permissions.
    4. Press OK.
    5. Select the role from the Assigned Role drop down.
    6. Select the Propagate to Child Objects box.
    7. Click OK.
Note: This permission can be set at the vCenter Server or datacenter level. 

See Also

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.


  • 22 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)

Please enter the Captcha code before clicking Submit.
  • 22 Ratings