The interface that is built into Perspectives to grant groups access to webviews has a field hidden and set to false... this particular field is the one that actually sets the permissions in vCO for the workflows... Here's what you'll need to do to get it working the way you expected it:
- Duplicate the "Edit perspective" workflow using the vCenter Orchestrator client (this one will allow you to fix your existing perspective)
- (Optionally duplicate the "Create perspective" and "Clone perspective" workflows - for creating future perspectives)
- Edit your newly duplicated workflow, go to the "Presentation" tab and expand out the "Grant Access Rights" group
- Click on the "Grant Access Rights" group
- In the bottom pane, click on the "Properties" tab
- Change the "Hide parameter input" value from "true" to "false" - OR Delete the property
After performing the steps above for each of the specified workflows, Save and Close the workflow and Run the desired workflow. Be sure to set the option for grant access rights to "Yes" before submitting. (You may optionally set the default value of the "grantAccessRights" to "Yes").
Once you have submitted the workflow after making these changes, the group you specified should be permitted to login. If they still are not able to, do the following check:
- Select one of the workflows that you have specified for the group in the vCO Client
- Click on the "Permissions" tab in the right pane
- Confirm that the group you specified is listed with at least "View" and "Execute"
Restart the vCenter Orchestrator Service if they are listed properly but unable to login to the webview.. if still unable, then try restarting the whole vCO server - Ideally, this should not be required.
Good luck!