An administrator is not able to log into Prism Central by using a new Active Directory user account. After Logging with the local user, the administrator verified that Directory Services and Role…

Question

Options

• AChange password at next logon attribute is set.
• BUser does not belong to the Administrators group.
• CActive Directory functional level of wrong.
• DPrism Element authentication is not configured.

• A
  7% (1)
• B
  73% (11)
• C
  20% (3)

Explanation

In Nutanix Prism Central, Active Directory authentication works by mapping AD groups to Prism roles via Role Mapping. Even if the Directory Services configuration (LDAP/AD connection) and the Role Mapping rules themselves are correctly configured, a user will still be denied access if they are not a member of the specific AD group that has been mapped to a Prism role. The administrator confirmed Directory Services and Role Mapping settings are valid - meaning the rules exist and the AD connection works - but the individual user simply lacks membership in the mapped group. Option A (change password at next logon) would typically produce a different error or redirect, not a silent login failure in this context. Option C is unlikely if Directory Services are verified as valid. Option D refers to Prism Element, not Prism Central, and they have independent authentication configurations.

No community discussion yet for this question.