2V0-32.24 Question 103
Select 3An organization is using vRealize Operations, vRealize Log Insight, and vRealize Suite Lifecycle Manager. They want to ensure that users only have permissions to access specific resources based on their roles. The organization also wants to integrate their existing Active Directory for authentication. While configuring Role-Based Access Control (RBAC), which steps should the administrator take to achieve this goal?
- A
Integrate vRealize Suite Lifecycle Manager with the organization's Active Directory.
- B
Assign global administrator permissions to all users in vRealize Operations.
- C
Create custom roles in vRealize Operations and map them to specific permissions.
- D
Set up user groups in vRealize Log Insight and assign roles to those groups.
- E
Disable local accounts to enforce authentication through Active Directory across all vRealize components.
Show answer and explanation
Correct answers: A, C, D
Explanation
To configure RBAC effectively in vRealize Operations, vRealize Log Insight, and vRealize Suite Lifecycle Manager, the administrator must integrate Active Directory for centralized identity and access management. Custom roles and permissions in vRealize Operations ensure users have appropriate access, while group-based role assignments in vRealize Log Insight streamline the process. Disabling local accounts is unnecessary and could create administrative challenges, so it is not recommended.
- A. Correct.
Integrating vRealize Suite Lifecycle Manager with Active Directory allows centralized identity management and authentication for the suite components, aligning with the organization's requirement.
- B. Incorrect.
Assigning global administrator permissions to all users in vRealize Operations violates the principle of least privilege and does not align with RBAC best practices.
- C. Correct.
Creating custom roles in vRealize Operations enables the administrator to define specific permissions, ensuring users have access only to the resources they need.
- D. Correct.
Setting up user groups in vRealize Log Insight and assigning roles to those groups simplifies RBAC management by allowing permissions to be applied at the group level.
- E. Incorrect.
Disabling local accounts is not a mandatory step and could lead to management challenges or lockout scenarios. Instead, enabling Active Directory-based authentication while retaining local accounts for emergency access is a better approach.