2V0-621 · Question #4
An administrator wishes to give a user the ability to manage snapshots for virtual machines. Which privilege does the administrator need to assign to the user?
The correct answer is A. Datastore.Allocate Space. Creating or managing VM snapshots requires the Datastore.Allocate Space privilege because snapshot delta files must be written to and allocated on the datastore.
Question
An administrator wishes to give a user the ability to manage snapshots for virtual machines. Which privilege does the administrator need to assign to the user?
Options
- ADatastore.Allocate Space
- BVirtual machine.Configuration.create snapshot
- CVirtual machine.Configuration.manage snapshot
- DDatastore.Browse Datastore
How the community answered
(28 responses)- A86% (24)
- B4% (1)
- C7% (2)
- D4% (1)
Why each option
Creating or managing VM snapshots requires the Datastore.Allocate Space privilege because snapshot delta files must be written to and allocated on the datastore.
Datastore.Allocate Space is required for snapshot operations because each snapshot creates one or more delta disk files (.vmdk) on the datastore, and without permission to allocate that space, the snapshot operation will fail. This is a frequently overlooked dependency - the VM-level snapshot privilege alone is insufficient if the user cannot write snapshot data to the datastore.
Virtual machine.Configuration.create snapshot is not the correct privilege path in vSphere; snapshot privileges fall under the Virtual machine.Snapshot management category, not Virtual machine.Configuration.
Virtual machine.Configuration.manage snapshot does not exist as a valid privilege in vSphere; manage snapshot operations are located under Virtual machine.Snapshot management, and this path is incorrect.
Datastore.Browse Datastore only allows a user to view files on a datastore and does not grant the ability to allocate or write snapshot delta files necessary for snapshot management.
Concept tested: Required privileges for VM snapshot management in vSphere
Source: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-C8D9D4F4-2F63-4CF3-82B5-4B5EB9D85C56.html
Topics
Community Discussion
No community discussion yet for this question.