VCP-CMA 2024 Question 55
Select 2A company is using VMware vRealize Automation (vRA) for deploying workloads. The administrator needs to configure Role-Based Access Control (RBAC) to ensure that users in the 'Developers' group can only deploy workloads within their assigned project and view their own deployments. Which of the following roles should be assigned to the 'Developers' group to meet these requirements?
- A
Project Viewer
- B
Project Administrator
- C
Service Broker Consumer
- D
Cloud Assembly User
- E
Deployment Viewer
Show answer and explanation
Correct answers: C, D
Explanation
In this scenario, developers need permissions to deploy workloads within their assigned project and manage their own deployments. The 'Service Broker Consumer' role allows users to deploy workloads from the catalog, while the 'Cloud Assembly User' role enables them to manage deployments within their project. These roles together meet the requirements without granting unnecessary administrative privileges.
- A. Incorrect.
The 'Project Viewer' role allows a user to view all resources and configurations within a project, but it does not grant permissions to deploy workloads.
- B. Incorrect.
The 'Project Administrator' role provides full administrative control over the project, which exceeds the requirements of this scenario as developers should not have administrative privileges.
- C. Correct.
The 'Service Broker Consumer' role allows users to deploy workloads from published content catalogs, aligning with the requirement for developers to deploy workloads within their assigned project.
- D. Correct.
The 'Cloud Assembly User' role enables users to create and manage deployments within their assigned project, which is necessary for developers to deploy and manage their workloads.
- E. Incorrect.
The 'Deployment Viewer' role only allows users to view deployments, which does not meet the requirement for developers to deploy workloads.