VCP-CMA 2024 Question 176
Select 1An organization recently onboarded VMware Aria Automation and wants to implement role-based access control (RBAC) for different user groups. The organization has the following requirements:
- Developers should be able to request and manage their deployments but not modify project settings.
- Cloud administrators should have full control over the infrastructure, including managing projects and integrations.
- A security team member should only have read-only access to review configurations and deployments.
Which set of roles should be assigned to meet these requirements?
- A
Assign the 'Project Administrator' role to developers, 'Cloud Administrator' role to cloud administrators, and 'Viewer' role to the security team.
- B
Assign the 'Deployer' role to developers, 'Cloud Administrator' role to cloud administrators, and 'Viewer' role to the security team.
- C
Assign the 'Cloud Assembly User' role to developers, 'Organization Owner' role to cloud administrators, and 'Viewer' role to the security team.
- D
Assign the 'Project Member' role to developers, 'Infrastructure Administrator' role to cloud administrators, and 'Viewer' role to the security team.
- E
Assign the 'Organization Member' role to developers, 'Infrastructure Administrator' role to cloud administrators, and 'Read-Only User' role to the security team.
Show answer and explanation
Correct answer: B
Explanation
To enforce RBAC in VMware Aria Automation, roles must align with the specific level of access required for different user groups. The 'Deployer' role is ideal for developers as it allows them to manage their own deployments without altering project settings. The 'Cloud Administrator' role provides full control over the infrastructure and projects, which matches the cloud administrators' requirements. Finally, the 'Viewer' role is suitable for the security team, as it provides read-only access to review configurations and deployments. Therefore, this combination satisfies all the stated requirements.
- A. Incorrect.
The 'Project Administrator' role allows users to manage project settings, which exceeds the required permissions for developers. This option does not align with the requirements.
- B. Correct.
The 'Deployer' role allows developers to request and manage their deployments without modifying project settings, the 'Cloud Administrator' role grants full control over infrastructure and project management, and the 'Viewer' role provides read-only access. This option meets all the requirements.
- C. Incorrect.
The 'Cloud Assembly User' role is too broad for developers as it grants extensive permissions. The 'Organization Owner' role gives excessive permissions to cloud administrators, which may not be appropriate. This option does not meet the requirements.
- D. Incorrect.
The 'Project Member' role does not provide developers the ability to manage their deployments, and the 'Infrastructure Administrator' role is more focused on infrastructure configurations, not project management. This option does not fully meet the requirements.
- E. Incorrect.
The 'Organization Member' role is insufficient for developers as it does not allow deployment management. Additionally, the 'Read-Only User' role is not specific to VMware Aria Automation and may not align with the 'Viewer' role requirements. This option is incorrect.