Environment: WAC 2.7.4/2.7.5 (2606 release), standalone (workgroup) Windows Server 2025, Hyper-V role
Extensions: Virtual Machines extension v12.1.5, Server Manager extension v6.0.15 (both confirmed fully up to date via auto-update)
To Reproduce
Steps to reproduce the behavior:
- Enable RBAC, create a user in the built-in "Windows Admin Center Hyper-V Administrators" or "...Readers" local group.
- Sign in to WAC as that user (non-local-admin).
- Open Virtual Machines inventory or Server Manager Overview.
- Page fails to load; notification shows "This operation was blocked by role based access control settings."
Expected behavior
The pages should load
Actual error (from Network tab, invokeCommand response):
The term 'Microsoft.SME.HyperV\Get-WACVMServerInventory' is not recognized...
The term 'Microsoft.SME.ServerManager\Get-WACSMServerInventory' is not recognized...
Root cause identified by CoPilot: confirmed via direct Invoke-Command against the Microsoft.Sme.PowerShell JEA endpoint (bypassing the browser) that these functions are genuinely absent from the installed module files (C:\ProgramData\WindowsAdminCenter\Modules\Microsoft.SME.HyperV*.psm1 and ...\Microsoft.SME.ServerManager*.psm1), not merely hidden by role capability restrictions — ruled out by confirming they're already listed in the relevant .psrc VisibleFunctions.
Note: works fine for full local Administrator accounts, since those bypass the JEA-constrained session entirely.
Environment: WAC 2.7.4/2.7.5 (2606 release), standalone (workgroup) Windows Server 2025, Hyper-V role
Extensions: Virtual Machines extension v12.1.5, Server Manager extension v6.0.15 (both confirmed fully up to date via auto-update)
To Reproduce
Steps to reproduce the behavior:
Expected behavior
The pages should load
Actual error (from Network tab, invokeCommand response):
The term 'Microsoft.SME.HyperV\Get-WACVMServerInventory' is not recognized...
The term 'Microsoft.SME.ServerManager\Get-WACSMServerInventory' is not recognized...
Root cause identified by CoPilot: confirmed via direct Invoke-Command against the Microsoft.Sme.PowerShell JEA endpoint (bypassing the browser) that these functions are genuinely absent from the installed module files (C:\ProgramData\WindowsAdminCenter\Modules\Microsoft.SME.HyperV*.psm1 and ...\Microsoft.SME.ServerManager*.psm1), not merely hidden by role capability restrictions — ruled out by confirming they're already listed in the relevant .psrc VisibleFunctions.
Note: works fine for full local Administrator accounts, since those bypass the JEA-constrained session entirely.