Bug ID 1730793: Config-restore fails with an error: "tenant-console role cant be assigned to users other than tenant users"

Last Modified: Jun 19, 2025

Affected Product(s):
F5OS Install/Upgrade, Velos(all modules)

Known Affected Versions:
F5OS-A 1.8.0, F5OS-C 1.8.0, F5OS-C 1.8.1

Opened: Nov 12, 2024

Severity: 4-Minor

Symptoms

Config-restore fails when restoring a backed-up configuration where user entry with tenant-console role exists without having actual tenant with the same name as user. Example: system database config-restore name <config_file name> A clean configuration is required before restoring to a previous configuration. Please perform a reset-to-default operation if you have not done so already. Proceed? [yes/no]: yes Error: /oc-sys:system/aaa/authentication/f5-system-aaa:users/user{<user_name>}/config/role: tenant-console role cant be assigned to users other than tenant users. Database config-restore failed.

Impact

Unable to restore the configurations after performing reset-to-default.

Conditions

1) After the software upgrade from v1.6.0 and below to v1.8.0, with an additional tenant-console users (tenant-console users with no tenant associated) will create tenant-console user on v1.8.0. However, in the event of a backup and reset to default configuration with subsequent config restore, an error will occur as version 1.8.0 does not support tenant-console users without an associated tenant. 2) In the event that a tenant is deleted without clearing the associated tenant-console user entry, future actions such as config-backup and reset-to-default will result in a failed config-restore as version 1.8.0 does not support tenant-console users without an associated tenant.

Workaround

Remove the tenant-console user entry (without corresponding tenant) from the config backup file and then perform the configuration restore with modified config file.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips