VCP-VMC 2024 Question 216
Single answerYour organization recently deployed VMware Cloud on AWS. As the administrator, you need to ensure that a new user can only access specific resources within the environment and has permission to manage virtual machines but cannot modify network settings. Which role or set of permissions should you assign to this user?
- A
CloudAdmin
- B
NSX Cloud Admin
- C
Custom role with permissions for managing virtual machines only
- D
Organization Owner
Show answer and explanation
Correct answer: C
Explanation
To meet the scenario's requirements of allowing the user to manage virtual machines without access to network settings, a custom role with permissions specific to managing virtual machines is the best solution. Predefined roles such as CloudAdmin or Organization Owner provide broader permissions than necessary, while NSX Cloud Admin focuses solely on networking.
- A. Incorrect.
The CloudAdmin role provides broad administrative permissions, including managing resources like virtual machines and network settings. This exceeds the requirements of the scenario.
- B. Incorrect.
The NSX Cloud Admin role is specific to managing NSX networking resources and does not grant permissions to manage virtual machines. This does not meet the requirements of the scenario.
- C. Correct.
A custom role with permissions for managing virtual machines only is the most appropriate choice as it aligns with the requirement of allowing the user to manage virtual machines while restricting access to network settings.
- D. Incorrect.
The Organization Owner role grants full access to all resources and settings within the organization, which is far beyond what is required in this scenario.