2V0-41.24 Question 225
Select 3An organization is utilizing NSX to implement multi-tenancy and wants to ensure that specific users within the organization have limited access to manage only their assigned resources. Which combination of features would best support this requirement?
- A
Assign roles such as 'NSX Administrator' or 'NSX Auditor' to provide granular control over permissions.
- B
Create separate organizations (orgs) within NSX to isolate resources between different tenants.
- C
Leverage projects within an organization to further segment resources and delegate management responsibilities to specific users.
- D
Grant all users within the organization 'Enterprise Admin' permissions to simplify access management.
- E
Use the built-in 'No Access' role to restrict user access completely to certain parts of NSX.
Show answer and explanation
Correct answers: A, B, C
Explanation
To support multi-tenancy in NSX while ensuring users have limited access to their assigned resources, the combination of roles, organizations (orgs), and projects is essential. Roles define what actions users can perform, organizations isolate tenants at a higher level, and projects further segment resources within an organization. This approach aligns with best practices for secure and efficient multi-tenancy in NSX.
- A. Correct.
Assigning roles like 'NSX Administrator' or 'NSX Auditor' ensures that permissions are tailored to user responsibilities, providing granular control.
- B. Correct.
Creating separate organizations (orgs) allows for complete isolation of resources between tenants, which is critical for multi-tenancy.
- C. Correct.
Projects within an organization allow finer segmentation and delegation of management responsibilities, which supports tenant-specific resource management.
- D. Incorrect.
Granting all users 'Enterprise Admin' permissions contradicts the principle of least privilege and is not suitable for multi-tenancy scenarios.
- E. Incorrect.
The 'No Access' role completely denies access, which is not relevant to enabling resource management for specific users.