Broadcom-VMware
2V0-622 · Question #223
2V0-622 Question #223: Real Exam Question with Answer & Explanation
The correct answer is A: Assign a Global Permission to the user.. Global Permissions are the only permission type in vSphere that apply across all vCenter Servers and solutions tied to the same Platform Services Controller SSO domain.
Section 1 – Configure and Administer vSphere 6.5 Security
Question
An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments. Which statement best describes how the administrator would accomplish this?
Options
- AAssign a Global Permission to the user.
- BAssign a vCenter Permission to the user.
- CAssign vsphere.local membership to the user.
- DAssign an ESXi Permission to the user.
Explanation
Global Permissions are the only permission type in vSphere that apply across all vCenter Servers and solutions tied to the same Platform Services Controller SSO domain.
Common mistakes.
- B. A vCenter Permission is scoped to a single vCenter Server inventory and its objects, so it cannot span additional vCenter Servers or vRealize Orchestrator.
- C. vsphere.local group membership controls SSO domain authentication, not authorization - it does not grant inventory-level permissions across vCenter or vRealize Orchestrator environments.
- D. An ESXi Permission applies only to that individual host and its local objects, with no ability to extend to vCenter Server or vRealize Orchestrator.
Concept tested. vSphere Global Permissions spanning multiple vCenter instances
Topics
#global permissions#Platform Services Controller#SSO domain#multi-vCenter
Community Discussion
No community discussion yet for this question.