2V0-21.23 Question 299
Select 2An administrator is tasked with configuring permissions for a Kubernetes namespace in a vSphere with Tanzu cluster. The administrator wants to ensure that specific users can deploy workloads to the namespace while restricting their access to modify critical namespace configurations. Which two permissions should the administrator assign to meet these requirements?
- A
Edit
- B
View
- C
Owner
- D
Namespace Admin
- E
Namespace Edit
Show answer and explanation
Correct answers: A, E
Explanation
To meet the requirements, the administrator should assign permissions that allow users to deploy workloads (Edit or Namespace Edit) but restrict access to modify namespace configurations. The 'Edit' and 'Namespace Edit' permissions fulfill this requirement by enabling workload management without granting full administrative control.
- A. Correct.
Edit permission allows users to manage workloads and resources within the namespace but does not grant full administrative control over the namespace configuration. This is appropriate for deploying workloads.
- B. Incorrect.
View permission only provides read-only access to the namespace, which is insufficient for deploying workloads.
- C. Incorrect.
Owner permission grants full control of the namespace, including both workload deployment and modifying namespace configurations. This exceeds the requirements of the scenario.
- D. Incorrect.
Namespace Admin permission allows for full administrative control of the namespace, including modifying configurations. This is not appropriate for restricting configuration access.
- E. Correct.
Namespace Edit permission allows users to manage workloads and apply changes to the namespace but does not provide full administrative control, making it appropriate for workload deployment while restricting critical changes.