An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments. Which statement best describes how the administrator would accomplish this?

Question

Accepted Answer

A. Assign a Global Permission to the user. A Global Permission is defined at the top-level root object of the global inventory tree and automatically propagates to every vCenter Server, vRealize Orchestrator instance, and other registered solutions within the same PSC domain. This single assignment spans all three vCenter Servers and the orchestrator simultaneously without requiring per-environment grants. It is the only vSphere permission type specifically designed for multi-solution, cross-environment access control.

Answer

B. Assign a vCenter Permission to the user. A vCenter Permission is scoped to a single vCenter Server's object hierarchy and does not extend access to other vCenter instances or vRealize Orchestrator in the same domain.

Answer

C. Assign vsphere.local membership to the user. Adding a user to vsphere.local grants SSO domain identity membership but does not by itself assign any vCenter privileges or propagate access across the registered environments.

Answer

D. Assign an ESXi Permission to the user. An ESXi Permission is host-local and only governs access to that individual ESXi host's direct management interface, providing no coverage over vCenter Server or vRealize Orchestrator.

An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments. Which…

Question

Options

How the community answered

Why each option

Topics

Community Discussion