2V0-32.24 Question 101
Select 3You are a cloud administrator managing a vRealize Suite environment for your organization. The security team has requested that you configure role-based access control (RBAC) in vRealize Operations to ensure that different teams have access to only the resources they need. The following requirements have been provided:
- The IT Operations team needs full administrative rights to all objects.
- The Development team should have read-only access to performance metrics and dashboards.
- External auditors should have limited access to view logs related to compliance.
Which of the following steps should you perform to meet these requirements?
- A
Assign the IT Operations team the 'Administrator' role at the global level in vRealize Operations.
- B
Create a custom role with read-only permissions for dashboards and assign it to the Development team.
- C
Grant the Auditors access to vRealize Log Insight with a role that includes the 'Log Viewer' permission.
- D
Set up a custom role in vRealize Suite Lifecycle Manager and assign it to the IT Operations team.
- E
Configure the Development team with the 'Power User' role in vRealize Operations for enhanced access.
Show answer and explanation
Correct answers: A, B, C
Explanation
To properly configure identity and access management using RBAC across vRealize Operations and vRealize Log Insight, you must assign roles that align with the specific access requirements for each team. The IT Operations team needs full administrative access, which can be achieved by assigning the 'Administrator' role at the global level in vRealize Operations. The Development team requires limited read-only access to dashboards, which can be fulfilled by creating a custom role. For the Auditors, access to compliance-related logs is necessary, which is provided by granting the 'Log Viewer' role in vRealize Log Insight. Incorrectly configuring roles or assigning roles with excessive permissions violates best practices for RBAC.
- A. Correct.
This option is correct because the IT Operations team requires full administrative rights to all objects, and the 'Administrator' role provides this access at the global level in vRealize Operations.
- B. Correct.
This option is correct because creating a custom role with read-only permissions for dashboards ensures the Development team can only view performance metrics and dashboards as required.
- C. Correct.
This option is correct because the Auditors need to view compliance-related logs, and granting access to vRealize Log Insight with the 'Log Viewer' permission aligns with this requirement.
- D. Incorrect.
This option is incorrect because role-based access control for vRealize Operations is configured within vRealize Operations itself, not in vRealize Suite Lifecycle Manager.
- E. Incorrect.
This option is incorrect because the 'Power User' role grants permissions beyond what is necessary for the Development team’s read-only requirement, violating the principle of least privilege.