An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments. Which statement best describes how the administrator would accomplish this?

Question

Accepted Answer

A. Assign a Global Permission to the user. A Global Permission is assigned at the global root object in the vSphere inventory hierarchy, causing it to propagate down to all vCenter Server instances and solutions such as vRealize Orchestrator that are registered with the same Platform Services Controller domain. This makes it the single correct mechanism for granting a user consistent privileges spanning all environments in one assignment.

Answer

B. Assign a vCenter Permission to the user. A vCenter Permission is scoped to a single vCenter Server inventory and its objects, so it cannot span additional vCenter Servers or vRealize Orchestrator.

Answer

C. Assign vsphere.local membership to the user. vsphere.local group membership controls SSO domain authentication, not authorization - it does not grant inventory-level permissions across vCenter or vRealize Orchestrator environments.

Answer

D. Assign an ESXi Permission to the user. An ESXi Permission applies only to that individual host and its local objects, with no ability to extend to vCenter Server or vRealize Orchestrator.

An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments. Which…

Question

Options

How the community answered

Why each option

Topics

Community Discussion