VCP-CMA 2024 Question 54
Select 2A cloud administrator is configuring role-based access control (RBAC) in vRealize Automation to ensure that different teams have the appropriate level of access to deploy and manage workloads. The administrator needs to grant a development team the ability to request new workloads and manage their own deployments, but without granting them the ability to modify shared cloud templates or access other teams' deployments. Which role(s) should the administrator assign to the development team?
- A
Cloud Assembly Administrator
- B
Service Broker Viewer
- C
Project Member
- D
Deployment Owner
- E
Custom Role with Deployment Permissions Only
Show answer and explanation
Correct answers: C, D
Explanation
The development team needs access to request workloads and manage their own deployments without affecting shared templates or other teams' deployments. The Project Member role grants the ability to request workloads within their assigned project, and the Deployment Owner role ensures they can manage their own deployments. These roles together provide the necessary permissions while adhering to the principle of least privilege.
- A. Incorrect.
Cloud Assembly Administrator provides full access to create and modify cloud templates across all projects. This is unnecessary and exceeds the required access for the development team.
- B. Incorrect.
Service Broker Viewer allows users to view and consume catalog items but does not empower them to manage their own deployments, making it insufficient for the scenario.
- C. Correct.
Project Member allows team members to request workloads within a specific project and manage their own deployments, which aligns with the requirements.
- D. Correct.
Deployment Owner is required to manage the team's own deployments, ensuring they have full control over their specific workloads.
- E. Incorrect.
A Custom Role with Deployment Permissions Only could work but is not a recommended approach in this scenario, as predefined roles like Project Member and Deployment Owner already fulfill the requirements efficiently.