2V0-622 · Question #4
An administrator wishes to give a user the ability to manage snapshots for virtual machines. Which privilege does the administrator need to assign to the user?
The correct answer is A. Datastore.Allocate Space. Creating or managing VM snapshots in vCenter requires the Datastore.Allocate Space privilege because snapshot delta disk files must be written to the datastore.
Question
An administrator wishes to give a user the ability to manage snapshots for virtual machines. Which privilege does the administrator need to assign to the user?
Options
- ADatastore.Allocate Space
- BVirtual machine.Configuration.create snapshot
- CVirtual machine.Configuration.manage snapshot
- DDatastore.Browse Datastore
How the community answered
(34 responses)- A74% (25)
- B3% (1)
- C15% (5)
- D9% (3)
Why each option
Creating or managing VM snapshots in vCenter requires the Datastore.Allocate Space privilege because snapshot delta disk files must be written to the datastore.
Datastore.Allocate Space is the required privilege for snapshot operations because each snapshot creates a delta (redo) disk file that consumes space on the datastore. Without this privilege, vCenter will deny the snapshot operation even if other VM-level permissions are present, as the system must reserve and write data to the underlying datastore.
Virtual machine.Configuration.create snapshot is not a valid standalone privilege path in vCenter; snapshot privileges reside under the Virtual machine.Snapshot Management category, not Configuration.
Virtual machine.Configuration.manage snapshot does not exist as a defined privilege in vCenter's privilege hierarchy; the correct category is Virtual machine.Snapshot Management.
Datastore.Browse Datastore only permits a user to view files on the datastore and does not grant the ability to allocate new space or write snapshot delta files.
Concept tested: Datastore.Allocate Space privilege required for VM snapshots
Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-0BD1CBFE-B9E9-4D7D-B07C-9EF74C5BD5CB.html
Topics
Community Discussion
No community discussion yet for this question.