An administrator is following the concept of least privilege and must configure permissions in a vSphere environment granting members of the group corp\VM-Managers the following abilities: - Power…

Question

Options

• AAdministrator
• BVirtual Machine Console User
• CVirtual Machine User
• DVirtual Machine Power User

• A
  14% (6)
• B
  5% (2)
• C
  10% (4)
• D
  71% (30)

Explanation

Virtual Machine Power User is the least-privileged out-of-the-box role that covers all three requirements: power on/off, console access, and snapshot creation. This makes it the precise fit - granting exactly what's needed without excess permissions.

Why the distractors fail:

• A. Administrator - Grants full vSphere control, violating least privilege entirely. Never the right answer when a narrower role exists.
• B. Virtual Machine Console User - Covers only console access; it cannot power VMs on/off or manage snapshots.
• C. Virtual Machine User - Covers power on/off and console access, but excludes snapshot creation - missing one of the three required abilities.

Memory tip: Think of the roles as a ladder: Console User < VM User < VM Power User < Administrator. Each rung adds capabilities. Snapshots are a "power" operation, so you need at least the Power User role to unlock them. If the task involves snapshots, climb one rung above VM User.

No community discussion yet for this question.