VCP-VCF Administrator 2024 Question 157
Single answerYou are a VMware Cloud Foundation Administrator tasked with providing a new team of developers access to a workload domain. The developers need permissions to deploy and manage their virtual machines but should not have the ability to modify infrastructure settings. How should you assign permissions to meet this requirement?
- A
Assign the 'Administrator' role to the developer group at the workload domain level.
- B
Assign the 'CloudAdmin' role to the developer group at the workload domain level.
- C
Assign the 'ResourceAdmin' role to the developer group at the workload domain level.
- D
Assign the 'Auditor' role to the developer group at the workload domain level.
Show answer and explanation
Correct answer: C
Explanation
The 'ResourceAdmin' role is specifically designed to enable users to manage resources like virtual machines within a workload domain while restricting their ability to modify critical infrastructure settings. This matches the requirement to allow the developer team to deploy and manage virtual machines without overprovisioning access to infrastructure settings.
- A. Incorrect.
The 'Administrator' role provides full control over the workload domain, including infrastructure settings, which exceeds the requirements for the developers.
- B. Incorrect.
The 'CloudAdmin' role is typically used for managing the entire VMware Cloud Foundation environment and does not restrict access to only deploying and managing VMs, which is too broad for the developers' needs.
- C. Correct.
The 'ResourceAdmin' role is the appropriate choice because it allows users to deploy and manage virtual machines without granting access to modify infrastructure settings, meeting the developers' requirements.
- D. Incorrect.
The 'Auditor' role only allows users to view configurations and logs but does not provide permissions to deploy or manage virtual machines, which does not meet the developers' needs.