nerdexam
Microsoft

70-243 · Question #40

You have a System Center 2012 Configuration Manager environment. You want to create a new package for an application. In the Configuration Manager console, you right-click the Packages node. You do…

The correct answer is A. Request Package Class Create rights for your user account. In SCCM Role-Based Administration, creating new objects requires Class-level Create rights. Without Class Create rights on the Package object type, the create option is hidden in the console.

security management

Question

You have a System Center 2012 Configuration Manager environment. You want to create a new package for an application. In the Configuration Manager console, you right-click the Packages node. You do not see the option to create a new package. You need to be able to create packages. What should you do?

Options

  • ARequest Package Class Create rights for your user account.
  • BRequest Package Instance Create rights for your user account.
  • CRequest Package Instance Class Modify rights for your user account.
  • DRequest that your user account be added to the SMS Admins local group on the site server.

How the community answered

(45 responses)
  • A
    78% (35)
  • B
    4% (2)
  • C
    11% (5)
  • D
    7% (3)

Why each option

In SCCM Role-Based Administration, creating new objects requires Class-level Create rights. Without Class Create rights on the Package object type, the create option is hidden in the console.

ARequest Package Class Create rights for your user account.Correct

SCCM Role-Based Administration distinguishes between Class security rights and Instance security rights. Class Create rights grant the ability to create new instances of an object type. Without Package Class Create rights, the Configuration Manager console suppresses the option to create a new package entirely, which matches the described symptom.

BRequest Package Instance Create rights for your user account.

Instance rights in SCCM apply only to specific existing objects, not to the ability to create new ones. There is no Instance Create permission that enables the creation of new Package objects.

CRequest Package Instance Class Modify rights for your user account.

Instance Modify rights allow a user to edit properties of an already-existing package instance but do not grant permission to create new packages or reveal the create option in the console.

DRequest that your user account be added to the SMS Admins local group on the site server.

The SMS Admins local group on the site server grants WMI provider access for the SMS namespace but does not configure RBAC console permissions - those are controlled exclusively through security roles and scopes in RBA.

Concept tested: SCCM Role-Based Administration Class versus Instance security rights

Source: https://learn.microsoft.com/en-us/mem/configmgr/core/understand/fundamentals-of-role-based-administration

Topics

#package permissions#class security rights#RBAC#console access

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 70-243 Practice