nerdexam
Broadcom-VMware

2V0-622 · Question #304

A domain user is able to successfully log into the vSphere Web Client, but notices that the vCenter Server system does not appear in the inventory. Which is the cause of this situation?

The correct answer is D. The domain user does not have vCenter Server permissions.. A user who can authenticate to the vSphere Web Client but sees no inventory lacks the necessary permission assignments on the vCenter Server object itself.

Section 1 – Configure and Administer vSphere 6.5 Security

Question

A domain user is able to successfully log into the vSphere Web Client, but notices that the vCenter Server system does not appear in the inventory. Which is the cause of this situation?

Options

  • AThe Service Control Agent service is not running.
  • BThe vCenter Server does not have anyhosts added to inventory yet.
  • CThe domain user has read-only permissions on vCenter Server.
  • DThe domain user does not have vCenter Server permissions.

How the community answered

(24 responses)
  • A
    4% (1)
  • C
    4% (1)
  • D
    92% (22)

Why each option

A user who can authenticate to the vSphere Web Client but sees no inventory lacks the necessary permission assignments on the vCenter Server object itself.

AThe Service Control Agent service is not running.

The Service Control Agent manages vSphere services at a platform level, and if it were not running, all users would experience service failures rather than one user seeing an empty inventory.

BThe vCenter Server does not have anyhosts added to inventory yet.

Having no hosts added would result in an empty Hosts and Clusters view, but the vCenter Server object itself would still appear in the inventory for any user who has permissions on it.

CThe domain user has read-only permissions on vCenter Server.

Read-only permissions still grant visibility into the inventory; the user would see vCenter Server but be unable to perform write operations on it.

DThe domain user does not have vCenter Server permissions.Correct

In vSphere, authentication and authorization are separate concerns. A domain user can be authenticated via SSO and reach the Web Client, but if no permissions have been assigned to that user on the vCenter Server object or its children, the inventory remains invisible. Permission assignments must be explicitly made on vCenter Server inventory objects to grant visibility and access.

Concept tested: vSphere permission assignment and inventory visibility

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-5372F580-5C23-4E9C-8A4E-EF1B4DD9033E.html

Topics

#vCenter permissions#user access#inventory visibility#RBAC

Community Discussion

No community discussion yet for this question.

Full 2V0-622 Practice