nerdexam
Broadcom-VMware

2V0-21.23 · Question #8

An administrator wants to allow a DevOps engineer the ability to delete Tanzu Kubernetes Grid (TKG) cluster objects in a vSphere Namespace. Which role would provide the minimum required permissions to

The correct answer is D. Can Edit. To grant a DevOps engineer the ability to delete Tanzu Kubernetes Grid cluster objects in a vSphere Namespace, the 'Can Edit' role provides the minimum necessary permissions.

Administrative and Operational Tasks

Question

An administrator wants to allow a DevOps engineer the ability to delete Tanzu Kubernetes Grid (TKG) cluster objects in a vSphere Namespace. Which role would provide the minimum required permissions to perform this operation?

Options

  • AAdministrator
  • BCan View
  • COwner
  • DCan Edit

How the community answered

(27 responses)
  • A
    19% (5)
  • B
    7% (2)
  • C
    4% (1)
  • D
    70% (19)

Why each option

To grant a DevOps engineer the ability to delete Tanzu Kubernetes Grid cluster objects in a vSphere Namespace, the 'Can Edit' role provides the minimum necessary permissions.

AAdministrator

The 'Administrator' role is a highly privileged role providing broad control over the entire vCenter Server instance, which is far beyond the minimum required permissions for operations within a specific vSphere Namespace.

BCan View

The 'Can View' role provides read-only access within a vSphere Namespace, allowing users to see objects but explicitly denying any modification or deletion capabilities.

COwner

The 'Owner' role grants full administrative control over a vSphere Namespace, including managing permissions and resources, which is a broader set of permissions than the minimum required just for deleting TKG cluster objects.

DCan EditCorrect

The 'Can Edit' role in a vSphere Namespace is specifically designed to provide permissions for creating, updating, and deleting objects, including Tanzu Kubernetes Grid (TKG) clusters and their associated objects, within that particular Namespace, aligning with the principle of least privilege.

Concept tested: vSphere with Tanzu Namespace roles and permissions

Source: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-with-tanzu/GUID-88C64F9E-BE75-4C3F-903D-939E8C76D5B4.html

Topics

#Tanzu Kubernetes Grid#vSphere Namespace#RBAC#Permissions

Community Discussion

No community discussion yet for this question.

Full 2V0-21.23 Practice