2V0-622 · Question #304
A domain user is able to successfully log into the vSphere Web Client, but notices that the vCenter Server system does not appear in the inventory. Which is the cause of this situation?
The correct answer is D. The domain user does not have vCenter Server permissions.. A user who can authenticate to the vSphere Web Client but sees no inventory lacks the necessary permission assignments on the vCenter Server object itself.
Question
A domain user is able to successfully log into the vSphere Web Client, but notices that the vCenter Server system does not appear in the inventory. Which is the cause of this situation?
Options
- AThe Service Control Agent service is not running.
- BThe vCenter Server does not have anyhosts added to inventory yet.
- CThe domain user has read-only permissions on vCenter Server.
- DThe domain user does not have vCenter Server permissions.
How the community answered
(24 responses)- A4% (1)
- C4% (1)
- D92% (22)
Why each option
A user who can authenticate to the vSphere Web Client but sees no inventory lacks the necessary permission assignments on the vCenter Server object itself.
The Service Control Agent manages vSphere services at a platform level, and if it were not running, all users would experience service failures rather than one user seeing an empty inventory.
Having no hosts added would result in an empty Hosts and Clusters view, but the vCenter Server object itself would still appear in the inventory for any user who has permissions on it.
Read-only permissions still grant visibility into the inventory; the user would see vCenter Server but be unable to perform write operations on it.
In vSphere, authentication and authorization are separate concerns. A domain user can be authenticated via SSO and reach the Web Client, but if no permissions have been assigned to that user on the vCenter Server object or its children, the inventory remains invisible. Permission assignments must be explicitly made on vCenter Server inventory objects to grant visibility and access.
Concept tested: vSphere permission assignment and inventory visibility
Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-5372F580-5C23-4E9C-8A4E-EF1B4DD9033E.html
Topics
Community Discussion
No community discussion yet for this question.