CLOUD-DIGITAL-LEADER · Question #83
Your company has a requirement to run manual tests on their web products for UX research before it is released to end customers. The people who will do the tests are external to the company. They…
The correct answer is D. Create a Group with the permissions required to do the test and record their in-puts. When users. The best practice for managing temporary, rotating users is to define permissions on a Group (rather than on individual accounts), and then simply add or remove users from that group as testers rotate each month. This approach follows the principle of least privilege - the…
Question
Your company has a requirement to run manual tests on their web products for UX research before it is released to end customers. The people who will do the tests are external to the company. They will either use their own Gmail id or be given temporary email ids using the applications and record-ing their inputs in another app. The UX testing is done in the last week of the month. Each month the UX testers could be different. How should the IT team manage the users?
Options
- ASince the app is anyways going to be public, create permanent credentials for the UX testers that
- BIt would be a security issue to have users come and go. Recommend that the test-ers be
- CIt would be a security issue to have users come and go. Recommend that the test-ers be
- DCreate a Group with the permissions required to do the test and record their in-puts. When users
How the community answered
(36 responses)- A14% (5)
- B3% (1)
- C8% (3)
- D75% (27)
Explanation
The best practice for managing temporary, rotating users is to define permissions on a Group (rather than on individual accounts), and then simply add or remove users from that group as testers rotate each month. This approach follows the principle of least privilege - the group grants only what is needed for testing - and is operationally clean: onboarding a new tester means one 'add to group' action, and offboarding means one 'remove from group' action. Option A is a security risk - permanent credentials for temporary users violate least-privilege principles. Options B and C suggest restricting UX testers to company employees, which contradicts the business requirement. Managing at the Group level is the standard IAM best practice.
Topics
Community Discussion
No community discussion yet for this question.