VCP-VCF Administrator 2024 Question 177
Single answerYou are a VMware Cloud Foundation Administrator tasked with assigning roles to users and groups in a Cloud Foundation environment. A new team member, Sarah, has joined the organization and requires access to manage virtual infrastructure resources but should not have permissions to modify the Cloud Foundation system configuration. What is the most appropriate predefined role to assign to Sarah?
- A
Cloud Administrator
- B
vSphere Administrator
- C
vSAN Administrator
- D
NSX Administrator
Show answer and explanation
Correct answer: B
Explanation
The vSphere Administrator role is the most appropriate choice for Sarah because it provides permissions to manage virtual infrastructure resources without involving Cloud Foundation system configuration, which matches the described requirements. Assigning roles with the principle of least privilege ensures users have adequate access while minimizing security risks.
- A. Incorrect.
The Cloud Administrator role provides broad permissions to manage the entire Cloud Foundation environment, including system configuration, which is not suitable in this scenario.
- B. Correct.
The vSphere Administrator role is appropriate because it grants permissions to manage virtual infrastructure resources, aligning with Sarah's needs while restricting access to system configuration.
- C. Incorrect.
The vSAN Administrator role is focused on managing vSAN storage resources and does not cover the broader virtual infrastructure management needs of Sarah's role.
- D. Incorrect.
The NSX Administrator role is limited to managing networking and security using NSX, which does not align with Sarah's requirement to manage virtual infrastructure resources.