VMware virtual machine restore fails with Status 2820

Problem

Full virtual machine restore fails with Status 2820.

Error Message

Detailed Status shows the following:

Jun 24, 2019 5:17:35 PM - begin reading
Jun 24, 2019 5:17:41 PM - end reading; read time: 0:00:06
Jun 24, 2019 5:17:41 PM - Info bpdm (pid=144976) completed reading backup image
Jun 24, 2019 5:17:42 PM - Info bpdm (pid=144976) EXITING with status 0
Jun 24, 2019 5:17:42 PM - Info xxxxx (pid=144976) StorageServer=xxxxx:xxxxx; Report=PDDO Stats for (xxxxx): read: 13849 KB, CR received: 38087 KB, CR received over FC: 0 KB, dedup: 0.0%
Jun 24, 2019 5:17:47 PM - Info bpVMutil (pid=145035) INF - vmwareLogger: SOAP 1.1 fault: "":ServerFaultCode [no subcode]
Jun 24, 2019 5:17:47 PM - Info bpVMutil (pid=145035) "Permission to perform this operation was denied."
Jun 24, 2019 5:17:47 PM - Info bpVMutil (pid=145035) Detail: <NoPermissionFault xmlns="urn:vim25" xsi:type="NoPermission"><object type="Folder">group-v106</object><privilegeId>VirtualMachine.Config.SwapPlacement</privilegeId></NoPermissionFault>
Jun 24, 2019 5:17:47 PM - Info bpVMutil (pid=145035) 
Jun 24, 2019 5:17:47 PM - end Restore; elapsed time 0:00:51
Jun 24, 2019 5:17:47 PM - Info bpVMutil (pid=145035) INF - vmwareLogger: CreateVmExAPI: SYM_VMC_ERROR:  SOAP_ERROR res=12
Jun 24, 2019 5:17:47 PM - Info bpVMutil (pid=145035) INF - vmwareLogger: CreateVirtualMachineExAPI: SYM_VMC_ERROR:  SOAP_ERROR
NetBackup VMware policy restore error  (2820)

Cause

The account used by NetBackup to access the vCenter Server has insufficient permissions to create a virtual machine. 

Solution

Identify the account used by NetBackup to access the vCenter Server under NetBackup Administration Concsole > Media Management > Credentials > Virtual Machine Servers > <vCenter Server Name>

Ensure this account has sufficient permissions in vCenter as described in the article "What are the minimum permissions needed to properly backup and restore using vStorage api?".