An engineer is configuring a new user account in Cisco ACI. The new user will be assigned the role of fabric administrator. The fabric has only one tenant, so the engineer associated the new user…

Question

Options

• AAssociate the new user with the security domain all.
• BGrant the new user R/W access to the user and management tenant.
• CAdd the DN uni/fabric under explicit rules.
• DBind the security domain infra to the new user account.

• A
  7% (3)
• B
  4% (2)
• C
  2% (1)
• D
  87% (39)

Explanation

Access Rights Workflow Dependencies The Cisco Application Centric Infrastructure (ACI) RBAC rules enable or restrict access to some or all of the fabric. For example, in order to configure a leaf switch for bare metal server access, the logged in administrator must have rights to the infra domain. By default, a tenant administrator does not have rights to the infra domain. In this case, a tenant administrator who plans to use a bare metal server connected to a leaf switch could not complete all the necessary steps to do so. The tenant administrator would have to coordinate with a fabric administrator who has rights to the infra domain. The fabric administrator would set up the switch configuration policies that the tenant administrator would use to deploy an application policy that uses the bare metal server attached to an ACI leaf switch. security-configuration-guide-50x/m_access_authentication_and_accounting.html

No community discussion yet for this question.