An administrator needs to ensure that only specific users can manage the virtual machines (VM) in a specific VMware vCenter folder. Which three steps are required to accomplish this? (Choose three.)

Question

Options

• AAssign the new role to the appropriate users/groups.
• BCreate a new role in vCenter with VM management permissions.
• CApply the role to the specific vCenter folder.
• DAdd the identity source to vCenter.
• ECreate a datastore cluster.

• A
  84% (41)
• D
  6% (3)
• E
  10% (5)

Explanation

To restrict VM management in a vCenter folder to specific users, you must create a custom role with the appropriate permissions (B), assign that role to the target users or groups (A), and apply the role assignment at the specific folder object (C) - together these three steps form vCenter's role-based access control (RBAC) model. Option D (adding an identity source) is a prerequisite for authenticating external directory users (like Active Directory), but it is not a step in assigning permissions to a folder, and it's not always required if users already exist in vCenter. Option E (creating a datastore cluster) is entirely unrelated - it deals with storage resource pooling, not access control.

Memory tip: Think "Create → Assign → Apply" - you can't assign a role that doesn't exist, and a role assigned to no object does nothing. Always follow that order: build the role, attach users to it, then scope it to the folder.

No community discussion yet for this question.