300-170 · Question #88
You are configuring RBAC on a Cisco UCS system. What happens when you assign multiple locales to a user?
The correct answer is D. Access is granted to all organizations that are specified in the locales. When multiple locales are assigned to a user in Cisco UCS RBAC, the user gains cumulative access to all organizations specified within those locales.
Question
You are configuring RBAC on a Cisco UCS system. What happens when you assign multiple locales to a user?
Options
- AAccess is denied to all organizations.
- BAccess is granted to only the last organization that is specified in the locales.
- CAccess is granted to only the first organization that is specified in the locales.
- DAccess is granted to all organizations that are specified in the locales.
How the community answered
(34 responses)- A3% (1)
- B3% (1)
- C6% (2)
- D88% (30)
Why each option
When multiple locales are assigned to a user in Cisco UCS RBAC, the user gains cumulative access to all organizations specified within those locales.
Access is not denied to all organizations when multiple locales are assigned; instead, locales are specifically used to grant and define the organizational scope of access.
Access is not restricted to only the last specified organization; locales are designed to be cumulative, granting permissions across all listed organizations.
Access is not restricted to only the first specified organization; locales are cumulative, allowing access to resources in all organizations that are part of the assignment.
In Cisco UCS Manager's Role-Based Access Control (RBAC) model, assigning multiple locales to a user effectively grants access to all resources within *all* the organizations or sub-organizations specified in those locales, cumulative broadening the user's scope of management permissions.
Concept tested: UCS RBAC locales
Source: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/sw/gui/config/guide/3-1/b_ucs_gui_config_guide_3_1/b_ucs_gui_config_guide_3_1_chapter_010000.html
Topics
Community Discussion
No community discussion yet for this question.