VCP-VCF Administrator 2024 Question 151
Select 3You have been tasked with creating a custom vCenter role to provide a junior administrator limited permissions to manage virtual machines in a specific cluster. The junior administrator should only be able to power on, power off, and take snapshots of VMs. Which combination of permissions should you include in the custom role to meet these requirements?
- A
Power On VM
- B
Power Off VM
- C
Create VM
- D
Remove VM
- E
Take Snapshot
- F
Delete Snapshot
Show answer and explanation
Correct answers: A, B, E
Explanation
To create a custom role in vCenter that limits the permissions of a junior administrator to managing virtual machines in a specific cluster, you need to carefully select only the required permissions. In this case, the required permissions are 'Power On VM', 'Power Off VM', and 'Take Snapshot'. Including any additional permissions could grant the administrator unnecessary capabilities, violating the principle of least privilege.
- A. Correct.
Correct. The junior administrator needs the 'Power On VM' permission to be able to turn on virtual machines.
- B. Correct.
Correct. The junior administrator needs the 'Power Off VM' permission to be able to turn off virtual machines.
- C. Incorrect.
Incorrect. The 'Create VM' permission would allow the junior administrator to create new virtual machines, which is outside the scope of the requirements.
- D. Incorrect.
Incorrect. The 'Remove VM' permission would allow the junior administrator to delete virtual machines, which is not part of the specified tasks.
- E. Correct.
Correct. The 'Take Snapshot' permission is required to allow the junior administrator to take snapshots of VMs.
- F. Incorrect.
Incorrect. The 'Delete Snapshot' permission would allow the junior administrator to delete existing snapshots, which is not required in this scenario.