2V0-21.23 · Question #8
An administrator wants to allow a DevOps engineer the ability to delete Tanzu Kubernetes Grid (TKG) cluster objects in a vSphere Namespace. Which role would provide the minimum required permissions to
The correct answer is D. Can Edit. To grant a DevOps engineer the ability to delete Tanzu Kubernetes Grid cluster objects in a vSphere Namespace, the 'Can Edit' role provides the minimum necessary permissions.
Question
An administrator wants to allow a DevOps engineer the ability to delete Tanzu Kubernetes Grid (TKG) cluster objects in a vSphere Namespace. Which role would provide the minimum required permissions to perform this operation?
Options
- AAdministrator
- BCan View
- COwner
- DCan Edit
How the community answered
(27 responses)- A19% (5)
- B7% (2)
- C4% (1)
- D70% (19)
Why each option
To grant a DevOps engineer the ability to delete Tanzu Kubernetes Grid cluster objects in a vSphere Namespace, the 'Can Edit' role provides the minimum necessary permissions.
The 'Administrator' role is a highly privileged role providing broad control over the entire vCenter Server instance, which is far beyond the minimum required permissions for operations within a specific vSphere Namespace.
The 'Can View' role provides read-only access within a vSphere Namespace, allowing users to see objects but explicitly denying any modification or deletion capabilities.
The 'Owner' role grants full administrative control over a vSphere Namespace, including managing permissions and resources, which is a broader set of permissions than the minimum required just for deleting TKG cluster objects.
The 'Can Edit' role in a vSphere Namespace is specifically designed to provide permissions for creating, updating, and deleting objects, including Tanzu Kubernetes Grid (TKG) clusters and their associated objects, within that particular Namespace, aligning with the principle of least privilege.
Concept tested: vSphere with Tanzu Namespace roles and permissions
Source: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-with-tanzu/GUID-88C64F9E-BE75-4C3F-903D-939E8C76D5B4.html
Topics
Community Discussion
No community discussion yet for this question.