An administrator wants to provide users restricted access. The users should only be able to perform the following tasks: - Create and consolidate virtual machine snapshots - Add/Remove virtual disks…

The Virtual machine user role only allows basic interactions like powering on/off and using the console, but does not include snapshot management or virtual disk configuration privileges.

The Virtual machine power user role is a default vCenter role that includes privileges for snapshot management tasks such as creating, reverting, and consolidating snapshots, as well as adding and removing virtual disks. It grants more capability than the basic Virtual machine user role without providing full administrative rights. This makes it the most appropriate default role that satisfies all three listed requirements.

The Virtual Datacenter administrator role is broader than required and grants full administrative access over a datacenter, violating the principle of least privilege for this use case.

The VMware Consolidated Backup user role is specifically scoped for backup agent operations and does not include general snapshot management or virtual disk configuration privileges.