Q: 9
An administrator is following the concept of least privilege and must configure permissions in a
vSphere environment granting members of the group corp\VM-Managers the following abilities:
Power on/off virtual machines
Open consoles
Create snapshots
Which out-of-the-box role satisfies these access control requirements?
Options
Discussion
C or D? I know Power User adds snapshot ability, but not totally sure if Console User gives that too. Maybe I'm overthinking it, but leaning more toward D right now.
C tbh. Virtual Machine User sounds like it fits since they can power on/off and open console, plus take some actions on VMs. I'm not certain if the snapshot permission is missing from this role though. I thought Power User was needed only for more advanced stuff than what the question lists. Someone else confirm if C could work?
For me, D since "Power User" is the only role out-of-the-box that does everything here (power, console, snapshots) but doesn't overgrant like Administrator. Pretty sure VM User can't make snapshots, and Console User is too limited. If auditing permissions in vSphere, this is a classic edge case where using Admin would be excessive.
saw pretty similar problem in my exam, in official practice. D is the pick since Power User covers power cycles, consoles, and snapshots (the other roles miss at least one). If you want to double-check, the vSphere Permissions doc spells it out. Anyone see different guidance in the exam guide?
D
Its D. Virtual Machine Power User gives those exact permissions without over-provisioning like Admin would. Pretty sure that's the least privilege fit.
Its A, pretty sure since Administrator has all the permissions needed here. Can anyone confirm?
Be respectful. No spam.
