VCP-VCF Administrator 2024 Question 158
Single answerA VMware Cloud Foundation Administrator is tasked with assigning permissions to a group of users in the SDDC Manager. The administrator needs to ensure that members of the group can manage workload domains but should not have access to modify system settings or manage user accounts. Which predefined role should the administrator assign to the group?
- A
Administrator
- B
Operator
- C
Viewer
- D
Workload Domain Administrator
Show answer and explanation
Correct answer: D
Explanation
In VMware Cloud Foundation, roles are predefined sets of permissions designed for specific tasks. The 'Workload Domain Administrator' role is the most appropriate for this scenario as it provides the required permissions to manage workload domains while restricting access to other sensitive areas such as system settings and user accounts. This ensures that permissions are granted based on the principle of least privilege.
- A. Incorrect.
The 'Administrator' role provides full access to all features, including managing system settings and user accounts, which exceeds the requirements in this scenario.
- B. Incorrect.
The 'Operator' role is intended for monitoring purposes and does not allow managing workload domains, which does not meet the requirements of the scenario.
- C. Incorrect.
The 'Viewer' role provides read-only access and cannot manage workload domains, which does not meet the requirements of the scenario.
- D. Correct.
The 'Workload Domain Administrator' role specifically allows managing workload domains without granting access to system settings or user account management, which fits the requirements of the scenario.