2V0-32.24 Question 104
Single answerYou are tasked with configuring role-based access control (RBAC) in vRealize Operations for your organization's cloud operations team. The team requires access to dashboards and reports but should not be able to modify or delete objects. Which role should you assign to ensure the team has the appropriate access while adhering to the principle of least privilege?
- A
Administrator
- B
PowerUser
- C
ReadOnly
- D
DashboardUser
Show answer and explanation
Correct answer: D
Explanation
The DashboardUser role is the most appropriate choice for the team as it provides access to the dashboards and reports needed for their operations while preventing them from modifying or deleting objects. This ensures compliance with the principle of least privilege, which is a key security best practice.
- A. Incorrect.
The Administrator role provides full access, including the ability to modify and delete objects, which exceeds the team's requirements and violates the principle of least privilege.
- B. Incorrect.
The PowerUser role allows access to dashboards and reports but also includes permissions to modify objects, which exceeds the team's needs.
- C. Incorrect.
The ReadOnly role provides view-only access to all objects but does not specifically grant access to dashboards and reports, which are explicitly required by the team.
- D. Correct.
The DashboardUser role grants access to dashboards and reports without allowing modifications or deletions, aligning with the team's requirements and adhering to the principle of least privilege.