An IT support engineer needs to access and modify Virtual Servers in three partitions (Common /Banking and Dev) daily on a BIG-IP device. The company operates a Least Privilege access policy. What…

To modify Virtual Servers, a "Manager" role is necessary as "Application Editor" provides more limited permissions, primarily for viewing and some application-specific configurations. Granting Manager access only to the /Common, /Banking, and /Dev partitions directly adheres to the least privilege principle, preventing unnecessary access to other parts of the BIG-IP system.

An Application Editor role does not have the necessary permissions to modify Virtual Servers, as its scope is generally limited to viewing and basic application configurations.

Granting "Manager" access to all partitions violates the least privilege policy, as the engineer's daily roles only require access to specific partitions.

An Application Editor role lacks the permissions to modify Virtual Servers, making it an insufficient level of access regardless of the partition scope.