nerdexam
Broadcom-VMware

2V0-622 · Question #4

An administrator wishes to give a user the ability to manage snapshots for virtual machines. Which privilege does the administrator need to assign to the user?

The correct answer is A. Datastore.Allocate Space. Creating or managing VM snapshots in vCenter requires the Datastore.Allocate Space privilege because snapshot delta disk files must be written to the datastore.

Section 1 – Configure and Administer vSphere 6.5 Security

Question

An administrator wishes to give a user the ability to manage snapshots for virtual machines. Which privilege does the administrator need to assign to the user?

Options

  • ADatastore.Allocate Space
  • BVirtual machine.Configuration.create snapshot
  • CVirtual machine.Configuration.manage snapshot
  • DDatastore.Browse Datastore

How the community answered

(34 responses)
  • A
    74% (25)
  • B
    3% (1)
  • C
    15% (5)
  • D
    9% (3)

Why each option

Creating or managing VM snapshots in vCenter requires the Datastore.Allocate Space privilege because snapshot delta disk files must be written to the datastore.

ADatastore.Allocate SpaceCorrect

Datastore.Allocate Space is the required privilege for snapshot operations because each snapshot creates a delta (redo) disk file that consumes space on the datastore. Without this privilege, vCenter will deny the snapshot operation even if other VM-level permissions are present, as the system must reserve and write data to the underlying datastore.

BVirtual machine.Configuration.create snapshot

Virtual machine.Configuration.create snapshot is not a valid standalone privilege path in vCenter; snapshot privileges reside under the Virtual machine.Snapshot Management category, not Configuration.

CVirtual machine.Configuration.manage snapshot

Virtual machine.Configuration.manage snapshot does not exist as a defined privilege in vCenter's privilege hierarchy; the correct category is Virtual machine.Snapshot Management.

DDatastore.Browse Datastore

Datastore.Browse Datastore only permits a user to view files on the datastore and does not grant the ability to allocate new space or write snapshot delta files.

Concept tested: Datastore.Allocate Space privilege required for VM snapshots

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-0BD1CBFE-B9E9-4D7D-B07C-9EF74C5BD5CB.html

Topics

#snapshot management#privilege assignment#datastore allocation

Community Discussion

No community discussion yet for this question.

Full 2V0-622 Practice